AUDIT_EOE
if (nlh->nlmsg_type != AUDIT_EOE && printk_ratelimit())
ab = audit_log_start(context, GFP_KERNEL, AUDIT_EOE);