7a82f89de92a ("audit: don't deref the syscall args when checking the openat2 open_how::flags")
1c30e3af8a79 ("audit: add support for the openat2 syscall")
42f355ef59a2 ("audit: replace magic audit syscall class numbers with macros")