And the only flag that will make it stop is setting

--audit_allow_sockets=false

or removing the

-a always,exit -S connect

kernel audit rule and leaving

audit_allow_sockets

set to true