AUDIT_DEV_UNSET
audit_mark->dev = inode ? inode->i_sb->s_dev : AUDIT_DEV_UNSET;
watch->dev = AUDIT_DEV_UNSET;
audit_update_watch(parent, dname, AUDIT_DEV_UNSET, AUDIT_INO_UNSET, 1,