audit: always follow va_copy() with va_end()