AUDIT_LAST_USER_MSG
case AUDIT_FIRST_USER_MSG ... AUDIT_LAST_USER_MSG:
nlmsg_type <= AUDIT_LAST_USER_MSG) ||