Journal logs show the symptom but the real failure happened earlier in a rotated boot that operators no longer inspect

Current logs only show the aftermath because the meaningful startup error lived in the previous boot or earlier rotation window that no one checked.