Penn State has paid $118M to Sandusky victims, new audit report says