This almost always happens when you're providing some sort of "day 1" configuration that causes the "bootstrap" machineconfig to differ from the "in cluster" rendered configuration.
The MCO has had numerous bugs in this area in the past. Examples:
In order to debug this, we need more information about the cluster configuration - a full must gather, or at least the platform and any specific customizations you're doing.