Comment # 5 on bug 1196829 from Enzo Matsumiya

I finally managed to reproduce this on a virtualized Leap JeOS 15.4 image
(raspi2b).

AFAICS the initial boot didn't present the problem by checking "journalctl -xeu
auditd".

Then I manually cleared the rules and tried "auditctl -a never,task", which
failed as you mention.

I'll be analysing this further now.