The pid in the audit context isn't always set up. Use tsk->pid when 
checking whether it's auditd in audit_filter_syscall(), instead of 
ctx->pid. Remove a band-aid which did the same elsewhere.
Signed-off-by: NDavid Woodhouse <dwmw2@infradead.org>