kernel/auditfilter.c: tree and watch will memory leak when failure occurs