[PATCH] audit: use ktime_get_coarse_ts64() for time access