all all metadata to "struct kmsg", make reallocation small-sized and less likely
API: append *_ns to nanosecond time values
use NSEC_PER_SEC instead of 1000000000ULL
remove some outdated comments