[PATCH 10/10] audit: Replace chunk attached to mark instead of replacing mark