An estimated £14.8m of a carer's benefit is thought to have been overpaid in Scotland due to error and fraud, a report by the Auditor General has shown.