A worker node named worker-2 has recently started showing intermittent Pod failures, and kubectl commands report the node as Ready but many Pods on it are stuck in ContainerCreating. You SSH into worker-2 to investigate the kubelet directly. The kubelet runs as a systemd-managed service. Which command should you run first to inspect the kubelet's recent runtime logs and identify errors preventing container creation?