audit_log_start   447 include/linux/audit.h extern struct audit_buffer *audit_log_start(struct audit_context *ctx, gfp_t gfp_mask, int type);
audit_log_start   701 include/net/xfrm.h 	audit_buf = audit_log_start(current->audit_context, GFP_ATOMIC,