AUDIT_LAST_USER_MSG2
case AUDIT_FIRST_USER_MSG2 ... AUDIT_LAST_USER_MSG2:
nlmsg_type <= AUDIT_LAST_USER_MSG2)) {