Are not the xavps deleted automatically when the processing of the request is finished? There should not be an explicit delete from the modules, unless strictly necessary for functionality of some feature, but the xavps and avps should not leak when processing normal SIP traffic.
Or are you using them in some event routes?