I cunningly put the audit call immediately after the 
copy_from_user().... but used the _userspace_ copy of the args still. 
Let's not do that.
Signed-off-by: David Woodhouse <dwmw2@infradead.org>