audit: Fix possible spurious -ENOSPC error