audit: don't free_chunk() after fsnotify_add_mark()