You're not seeing what has happened in the meantime because of printk rate limiting, as evidenced by "[ 41.489482] audit_printk_skb: 159 callbacks suppressed". To stop rate limiting kernel printk output, temporarily add a file in /etc/sysctl.d/ named something like 99-printk_ratelimiting.conf (the suffix is the important part of the name) that contains:
kernel.printk_ratelimit=0
and then reboot. This will let you see the audit messages that the kernel is dropping due to rate limiting.
You're not seeing what has happened in the meantime because of printk rate limiting, as evidenced by "[ 41.489482] audit_printk_skb: 159 callbacks suppressed". To stop rate limiting kernel printk output, temporarily add a file in /etc/sysctl.d/ named something like 99-printk_ ratelimiting. conf (the suffix is the important part of the name) that contains:
kernel. printk_ ratelimit= 0
and then reboot. This will let you see the audit messages that the kernel is dropping due to rate limiting.