2026/05/13 20:37:51 [unexpected] policy requires hardware attestation, but device does not support it: --hardware-attestation is not supported on this platform or in this build of tailscaled
2026/05/13 20:37:51 logtail started
2026/05/13 20:37:51 Program starting: v1.96.4-t41cb72f27, Go 1.26.1: []string{"/opt/homebrew/opt/tailscale/bin/tailscaled", "--tun=userspace-networking", "--socks5-server=localhost:1055", "--outbound-http-proxy-listen=localhost:1056", "--statedir=/var/lib/tailscale", "--socket=/var/run/tailscale-brew.socket"}
2026/05/13 20:37:51 LogID: 380cec56a27ede9b73c7ac1a215cb5ca6ebc5a0a1bd269b89d82e853d913541c
2026/05/13 20:37:51 logpolicy: using system state directory "/Library/Tailscale"
logpolicy.ConfigFromFile /Library/Tailscale/tailscaled.log.conf: open /Library/Tailscale/tailscaled.log.conf: no such file or directory
logpolicy.Config.Validate for /Library/Tailscale/tailscaled.log.conf: config is nil
2026/05/13 20:37:51 dns: using *dns.darwinConfigurator
2026/05/13 20:37:51 wgengine.NewUserspaceEngine(tun "userspace-networking") ...
2026/05/13 20:37:51 dns: using dns.noopManager
2026/05/13 20:37:51 link state: interfaces.State{defaultRoute=en0 ifs={en0:[192.168.0.2/24 fd4b:356f:9c43:4cfa:c22:543d:642c:d29a/64 llu6] utun4:[198.18.64.7/20]} v4=true v6=true}
2026/05/13 20:37:51 magicsock: disco key = d:87347df0c6ce2098
2026/05/13 20:37:51 Creating WireGuard device...
2026/05/13 20:37:51 Bringing WireGuard device up...
2026/05/13 20:37:51 Bringing router up...
2026/05/13 20:37:51 Clearing router settings...
2026/05/13 20:37:51 Starting network monitor...
2026/05/13 20:37:51 Engine created.
2026/05/13 20:37:51 pm: migrating "_daemon" profile to new format
2026/05/13 20:37:51 logpolicy: using system state directory "/Library/Tailscale"
2026/05/13 20:37:51 linkChange: in state NoState; PAC or proxyConfig changed; updating routes
2026/05/13 20:37:51 got LocalBackend in 11ms
2026/05/13 20:37:51 Start
2026/05/13 20:37:51 ipnext: active extensions: relayserver, taildrop, conn25, portlist, posture, clientupdate
2026/05/13 20:37:51 TPM: error opening: TPM not supported on this platform
2026/05/13 20:37:51 Backend: logs: be:380cec56a27ede9b73c7ac1a215cb5ca6ebc5a0a1bd269b89d82e853d913541c fe:
2026/05/13 20:37:51 Switching ipn state NoState -> NeedsLogin (WantRunning=false, nm=false)
2026/05/13 20:37:51 blockEngineUpdates(true)
2026/05/13 20:37:51 wgengine: Reconfig: configuring userspace WireGuard config (with 0/0 peers)
2026/05/13 20:37:51 health(warnable=wantrunning-false): error: Tailscale is stopped.
2026/05/13 20:37:51 wgengine: Reconfig: configuring router
2026/05/13 20:37:51 wgengine: Reconfig: user dialer
2026/05/13 20:37:51 wgengine: Reconfig: configuring DNS
2026/05/13 20:37:51 dns: Set: {DefaultResolvers:[] Routes:{} SearchDomains:[] Hosts:0}
2026/05/13 20:37:51 dns: Resolvercfg: {Routes:{} Hosts:0 LocalDomains:[]}
2026/05/13 20:37:51 dns: OScfg: {}
2026/05/13 20:38:12 localapi: [POST] /localapi/v0/check-prefs
2026/05/13 20:38:12 localapi: [POST] /localapi/v0/start
2026/05/13 20:38:12 Start
2026/05/13 20:38:12 Start: updated prefs: Prefs{ra=false dns=true want=true statefulFiltering=false host="mac-studio" update=check Persist=nil}, reason: [opts.UpdatePrefs]
2026/05/13 20:38:12 generating new machine key
2026/05/13 20:38:12 machine key written to store
2026/05/13 20:38:12 Backend: logs: be:380cec56a27ede9b73c7ac1a215cb5ca6ebc5a0a1bd269b89d82e853d913541c fe:
2026/05/13 20:38:12 health(warnable=warming-up): error: Tailscale is starting. Please wait.
2026/05/13 20:38:12 Switching ipn state NoState -> NeedsLogin (WantRunning=true, nm=false)
2026/05/13 20:38:12 blockEngineUpdates(true)
2026/05/13 20:38:12 health(warnable=wantrunning-false): ok
2026/05/13 20:38:12 control: client.Shutdown ...
2026/05/13 20:38:12 control: mapRoutine: exiting
2026/05/13 20:38:12 control: updateRoutine: exiting
2026/05/13 20:38:12 control: authRoutine: exiting
2026/05/13 20:38:12 control: Client.Shutdown done.
2026/05/13 20:38:12 localapi: [POST] /localapi/v0/login-interactive
2026/05/13 20:38:12 StartLoginInteractiveAs("root"): url=false
2026/05/13 20:38:12 control: client.Login(2)
2026/05/13 20:38:12 control: LoginInteractive -> regen=true
2026/05/13 20:38:12 control: doLogin(regen=true, hasUrl=false)
2026/05/13 20:38:14 control: control server key from https://controlplane.tailscale.com: ts2021=[fSeS+], legacy=[nlFWp]
2026/05/13 20:38:14 control: Generating a new nodekey.
2026/05/13 20:38:14 control: RegisterReq: onode= node=[2iNkl] fup=false nks=false
2026/05/13 20:38:17 control: RegisterReq: got response; nodeKeyExpired=false, machineAuthorized=false; authURL=true
2026/05/13 20:38:17 control: AuthURL is https://login.tailscale.com/a/652b49c01faff
2026/05/13 20:38:17 control: doLogin(regen=false, hasUrl=true)
2026/05/13 20:38:17 Received auth URL: https://login.tailsc...
2026/05/13 20:38:17 popBrowserAuthNow("root"): url=true, key-expired=false, seamless-key-renewal=false
2026/05/13 20:38:17 blockEngineUpdates(true)
2026/05/13 20:38:17 stopEngineAndWait...
2026/05/13 20:38:17 control: RegisterReq: onode= node=[2iNkl] fup=true nks=false
2026/05/13 20:38:17 stopEngineAndWait: done.
2026/05/13 20:38:17 health(warnable=warming-up): ok
2026/05/13 20:39:27 health(warnable=login-state): error: You are logged out. The last login error was: register request: http 410: auth path not found
2026/05/13 20:39:27 Received error: register request: http 410: auth path not found
2026/05/13 20:39:27 control: doLogin(regen=false, hasUrl=true)
2026/05/13 20:39:27 control: RegisterReq: onode= node=[2iNkl] fup=true nks=false
2026/05/13 20:39:28 control: RegisterReq: got response; nodeKeyExpired=false, machineAuthorized=true; authURL=false
2026/05/13 20:39:28 health(warnable=login-state): ok
2026/05/13 20:39:28 blockEngineUpdates(false)
2026/05/13 20:39:28 health(warnable=not-in-map-poll): ok
2026/05/13 20:39:28 control: netmap: got new dial plan from control
2026/05/13 20:39:29 active login: zyldwyzy@gmail.com
2026/05/13 20:39:29 netmap: suggested exit node: no preferred DERP, try again later
2026/05/13 20:39:29 Switching ipn state NeedsLogin -> Starting (WantRunning=true, nm=true)
2026/05/13 20:39:29 magicsock: SetPrivateKey called (init)
2026/05/13 20:39:29 wgengine: Reconfig: configuring userspace WireGuard config (with 0/1 peers)
2026/05/13 20:39:29 wgengine: Reconfig: configuring router
2026/05/13 20:39:29 wgengine: Reconfig: user dialer
2026/05/13 20:39:29 tsdial: bart table size: 4
2026/05/13 20:39:29 wgengine: Reconfig: configuring DNS
2026/05/13 20:39:29 dns: Set: {DefaultResolvers:[] Routes:{tail75be91.ts.net.:[] ts.net.:[199.247.155.53 2620:111:8007::53]}+65arpa SearchDomains:[tail75be91.ts.net.] Hosts:3}
2026/05/13 20:39:29 dns: Resolvercfg: {Routes:{ts.net.:[199.247.155.53 2620:111:8007::53]} Hosts:3 LocalDomains:[tail75be91.ts.net.]+65arpa}
2026/05/13 20:39:29 dns: OScfg: {Nameservers:[100.100.100.100 fd7a:115c:a1e0::53] SearchDomains:[tail75be91.ts.net.] MatchDomains:[tail75be91.ts.net. ts.net.]+65arpa}
2026/05/13 20:39:29 peerapi: serving on http://100.112.115.109:34450
2026/05/13 20:39:29 peerapi: serving on http://[fd7a:115c:a1e0::363b:736d]:34450
2026/05/13 20:39:29 routerIP/FetchRIB: sysctl: cannot allocate memory
2026/05/13 20:39:29 monitor: gateway and self IP changed: gw=192.168.0.1 self=192.168.0.2
2026/05/13 20:39:29 netcheck: DetectCaptivePortal(found=false)
2026/05/13 20:39:29 magicsock: home DERP changing from derp-0 [0ms] to derp-27 [232ms]
2026/05/13 20:39:29 magicsock: home is now derp-27 (iad)
2026/05/13 20:39:29 health(warnable=no-derp-home): ok
2026/05/13 20:39:29 magicsock: adding connection to derp-27 for home-keep-alive
2026/05/13 20:39:29 magicsock: 1 active derp conns: derp-27=cr0s,wr0s
2026/05/13 20:39:29 control: NetInfo: NetInfo{varies=false ipv6=false ipv6os=true udp=true icmpv4=false derp=#27 portmap= link="" firewallmode=""}
2026/05/13 20:39:29 derphttp.Client.Connect: connecting to derp-27 (iad)
2026/05/13 20:39:29 magicsock: endpoints changed: 172.93.100.166:54099 (stun), 192.168.0.2:54099 (local), 198.18.64.7:54099 (local)
2026/05/13 20:39:29 Switching ipn state Starting -> Running (WantRunning=true, nm=true)
2026/05/13 20:39:30 magicsock: derp-27 connected; connGen=1
2026/05/13 20:39:30 health(warnable=no-derp-connection): ok
2026/05/13 20:40:21 tsdial: closing system connection 198.18.64.7:53580->192.200.0.105:80 due to link change
2026/05/13 20:40:21 Received error: PollNetMap: read tcp 198.18.64.7:53580->192.200.0.105:80: use of closed network connection
2026/05/13 20:40:22 control: controlhttp: forcing port 443 dial due to recent noise dial
2026/05/13 20:40:22 magicsock: endpoints changed: 125.119.77.251:33913 (stun), 172.93.100.166:54099 (stun), 192.168.0.2:54099 (local), 198.18.64.7:54099 (local)
2026/05/13 20:40:25 netcheck: netcheck: UDP is blocked, trying HTTPS
2026/05/13 20:40:25 netcheck: UDP is blocked, trying ICMP
2026/05/13 20:40:26 logtail: upload: log upload of 456 bytes compressed failed: Post "https://log.tailscale.com/c/tailnode.log.tailscale.io/a8666873a6609a8a19b31891c3c2b3462f340cdc14032c525b737706f16acc5f": EOF
2026/05/13 20:40:26 LinkChange: major, rebinding: old: interfaces.State{defaultRoute= ifs={en0:[192.168.0.2/24 fd4b:356f:9c43:4cfa:c22:543d:642c:d29a/64 llu6] utun4:[198.18.64.7/20]} v4=true v6=true} new: interfaces.State{defaultRoute=en0 ifs={en0:[192.168.0.2/24 fd4b:356f:9c43:4cfa:c22:543d:642c:d29a/64 llu6] utun4:[198.18.64.7/20]} v4=true v6=true}
2026/05/13 20:40:26 dns: Set: {DefaultResolvers:[] Routes:{tail75be91.ts.net.:[] ts.net.:[199.247.155.53 2620:111:8007::53]}+65arpa SearchDomains:[tail75be91.ts.net.] Hosts:3}
2026/05/13 20:40:26 dns: Resolvercfg: {Routes:{ts.net.:[199.247.155.53 2620:111:8007::53]} Hosts:3 LocalDomains:[tail75be91.ts.net.]+65arpa}
2026/05/13 20:40:26 dns: OScfg: {Nameservers:[100.100.100.100 fd7a:115c:a1e0::53] SearchDomains:[tail75be91.ts.net.] MatchDomains:[tail75be91.ts.net. ts.net.]+65arpa}
2026/05/13 20:40:26 wgengine: set DNS config again after major link change
2026/05/13 20:40:26 Rebind; defIf="en0", ips=[192.168.0.2/24 fd4b:356f:9c43:4cfa:c22:543d:642c:d29a/64 fe80::82:32e3:766a:85b3/64]
2026/05/13 20:40:26 magicsock: closing connection to derp-27 (rebind-default-route-change), age 57s
2026/05/13 20:40:26 magicsock: 0 active derp conns
2026/05/13 20:40:26 magicsock: adding connection to derp-27 for home-keep-alive
2026/05/13 20:40:26 magicsock: 1 active derp conns: derp-27=cr0s,wr0s
2026/05/13 20:40:26 health(warnable=no-derp-connection): ok
2026/05/13 20:40:26 derphttp.Client.Recv: connecting to derp-27 (iad)
2026/05/13 20:40:26 health(warnable=no-derp-connection): ok
2026/05/13 20:40:26 health(warnable=no-derp-connection): ok
2026/05/13 20:40:29 magicsock: derp-27 connected; connGen=1
2026/05/13 20:40:29 health(warnable=no-derp-connection): ok
2026/05/13 20:40:29 health(warnable=no-derp-connection): ok
2026/05/13 20:40:29 control: netmap: got new dial plan from control
2026/05/13 20:40:29 netmap: suggested exit node:  ()
2026/05/13 20:40:47 localapi: [POST] /localapi/v0/query-feature
2026/05/13 20:40:47 control: controlhttp: forcing port 443 dial due to recent noise dial
2026/05/13 20:40:49 localapi: [POST] /localapi/v0/upload-client-metrics
2026/05/13 20:41:13 logtail: upload succeeded after 1 failures and 47s
2026/05/13 20:44:08 netmap: suggested exit node:  ()
2026/05/13 20:44:08 localapi: [POST] /localapi/v0/upload-client-metrics
2026/05/13 20:44:08 localapi: [POST] /localapi/v0/serve-config
2026/05/13 20:44:08 serve: creating a new proxy handler for http://localhost:9999
2026/05/13 20:44:11 cert("mac-studio.tail75be91.ts.net"): registered ACME account.
2026/05/13 20:44:12 cert("mac-studio.tail75be91.ts.net"): starting SetDNS call for _acme-challenge.mac-studio.tail75be91.ts.net...
2026/05/13 20:44:23 cert("mac-studio.tail75be91.ts.net"): did SetDNS for _acme-challenge.mac-studio.tail75be91.ts.net
2026/05/13 20:44:26 cert("mac-studio.tail75be91.ts.net"): requesting cert...
2026/05/13 20:44:28 cert("mac-studio.tail75be91.ts.net"): got cert
2026/05/13 20:45:31 localapi: [POST] /localapi/v0/serve-config
2026/05/13 20:46:33 localapi: [POST] /localapi/v0/serve-config
2026/05/13 20:46:33 Hostinfo.IngressEnabled changed to true
2026/05/13 20:46:35 netmap: suggested exit node:  ()
2026/05/13 20:46:35 tstun: peer config: peerConfigTable{nativeAddr4: 100.112.115.109, nativeAddr6: fd7a:115c:a1e0::363b:736d, }
2026/05/13 20:46:35 wgengine: Reconfig: configuring userspace WireGuard config (with 0/24 peers)
2026/05/13 20:46:49 wgengine: idle peer [fNXXK] now active, reconfiguring WireGuard
2026/05/13 20:46:49 wgengine: Reconfig: configuring userspace WireGuard config (with 1/24 peers)
2026/05/13 20:46:49 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:34529 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 20:46:50 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:16611 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 20:46:50 [RATELIMIT] format("%s: %s %d %s\n%s")
2026/05/13 20:46:59 wgengine: idle peer [ZTKE5] now active, reconfiguring WireGuard
2026/05/13 20:46:59 wgengine: Reconfig: configuring userspace WireGuard config (with 2/24 peers)
2026/05/13 20:46:59 Drop: TCP{[fd7a:115c:a1e0::401:c29f]:26508 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 20:47:00 Drop: TCP{[fd7a:115c:a1e0::401:c29f]:26508 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 20:47:00 [RATELIMIT] format("%s: %s %d %s\n%s")
2026/05/13 20:47:11 [RATELIMIT] format("%s: %s %d %s\n%s") (2 dropped)
2026/05/13 20:47:12 Drop: TCP{[fd7a:115c:a1e0::401:c29f]:58645 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 20:47:12 [RATELIMIT] format("%s: %s %d %s\n%s")
2026/05/13 20:47:20 [RATELIMIT] format("%s: %s %d %s\n%s") (4 dropped)
2026/05/13 20:47:21 localapi: [POST] /localapi/v0/serve-config
2026/05/13 20:47:21 serve: closing idle connections to http://localhost:9999
2026/05/13 20:47:21 Hostinfo.IngressEnabled changed to false
2026/05/13 20:47:23 netmap: suggested exit node:  ()
2026/05/13 20:47:23 tstun: peer config: peerConfigTable(nil)
2026/05/13 20:47:23 wgengine: Reconfig: configuring userspace WireGuard config (with 0/1 peers)
2026/05/13 20:50:04 localapi: [POST] /localapi/v0/serve-config
2026/05/13 20:50:04 serve: creating a new proxy handler for http://localhost:9999
2026/05/13 20:50:04 Hostinfo.IngressEnabled changed to true
2026/05/13 20:50:06 netmap: suggested exit node:  ()
2026/05/13 20:50:06 tstun: peer config: peerConfigTable{nativeAddr4: 100.112.115.109, nativeAddr6: fd7a:115c:a1e0::363b:736d, }
2026/05/13 20:50:06 wgengine: Reconfig: configuring userspace WireGuard config (with 0/24 peers)
2026/05/13 20:50:26 wgengine: Reconfig: configuring userspace WireGuard config (with 1/24 peers)
2026/05/13 20:50:26 magicsock: adding connection to derp-1 for [ZTKE5]
2026/05/13 20:50:26 magicsock: 2 active derp conns: derp-1=cr0s,wr0s derp-27=cr10m0s,wr3m0s
2026/05/13 20:50:26 derphttp.Client.Recv: connecting to derp-1 (nyc)
2026/05/13 20:50:28 magicsock: derp-1 connected; connGen=1
2026/05/13 20:53:27 wgengine: idle peer [fNXXK] now active, reconfiguring WireGuard
2026/05/13 20:53:27 wgengine: Reconfig: configuring userspace WireGuard config (with 2/24 peers)
2026/05/13 20:53:27 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:21165 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 20:53:34 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:18700 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 20:53:43 http: proxy error: context canceled
2026/05/13 20:53:43 http: proxy error: context canceled
2026/05/13 20:53:43 http: proxy error: context canceled
2026/05/13 20:53:43 http: proxy error: context canceled
2026/05/13 20:53:43 http: proxy error: context canceled
2026/05/13 20:53:43 netstack: decrementing connsInFlightByClient[fd7a:115c:a1e0::1e01:7098] because the packet was not handled; new value is 0
2026/05/13 20:53:43 netstack: decrementing connsInFlightByClient[fd7a:115c:a1e0::1e01:7098] because the packet was not handled; new value is 0
2026/05/13 20:53:43 netstack: decrementing connsInFlightByClient[fd7a:115c:a1e0::1e01:7098] because the packet was not handled; new value is 0
2026/05/13 20:53:43 netstack: decrementing connsInFlightByClient[fd7a:115c:a1e0::1e01:7098] because the packet was not handled; new value is 0
2026/05/13 20:53:43 netstack: decrementing connsInFlightByClient[fd7a:115c:a1e0::1e01:7098] because the packet was not handled; new value is 0
2026/05/13 20:53:43 [RATELIMIT] format("netstack: decrementing connsInFlightByClient[%v] because the packet was not handled; new value is %d")
2026/05/13 20:57:03 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:21986 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 20:57:03 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:21986 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 20:57:04 [RATELIMIT] format("%s: %s %d %s\n%s")
2026/05/13 20:57:50 Drop: TCP{[fd7a:115c:a1e0::401:c29f]:53535 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 20:58:27 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:23297 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 20:58:29 netstack: decrementing connsInFlightByClient[fd7a:115c:a1e0::1e01:7098] because the packet was not handled; new value is 0
2026/05/13 20:58:32 netstack: decrementing connsInFlightByClient[fd7a:115c:a1e0::401:c29f] because the packet was not handled; new value is 0
2026/05/13 20:58:32 Drop: TCP{[fd7a:115c:a1e0::401:c29f]:48281 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 20:58:33 http: TLS handshake error from [fd7a:115c:a1e0::401:c29f]:48281: EOF
2026/05/13 20:58:35 Drop: TCP{[fd7a:115c:a1e0::401:c29f]:44340 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 20:58:36 http: TLS handshake error from [fd7a:115c:a1e0::401:c29f]:44340: EOF
2026/05/13 20:59:48 Drop: TCP{[fd7a:115c:a1e0::401:c29f]:24125 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 20:59:48 Drop: TCP{[fd7a:115c:a1e0::401:c29f]:52247 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 20:59:48 Drop: TCP{[fd7a:115c:a1e0::401:c29f]:33010 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 20:59:48 [RATELIMIT] format("%s: %s %d %s\n%s")
2026/05/13 20:59:51 http: TLS handshake error from [fd7a:115c:a1e0::1e01:7098]:18355: EOF
2026/05/13 20:59:52 http: TLS handshake error from [fd7a:115c:a1e0::401:c29f]:55304: EOF
2026/05/13 20:59:54 http: TLS handshake error from [fd7a:115c:a1e0::1e01:7098]:24976: EOF
2026/05/13 20:59:54 http: TLS handshake error from [fd7a:115c:a1e0::401:c29f]:45438: tls: client requested unsupported application protocols (["http/0.9" "http/1.0" "spdy/1" "spdy/2" "spdy/3" "h2c" "hq"])
2026/05/13 20:59:55 [RATELIMIT] format("%s: %s %d %s\n%s") (5 dropped)
2026/05/13 20:59:55 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:50645 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 20:59:55 http: TLS handshake error from [fd7a:115c:a1e0::1e01:7098]:50645: tls: client requested unsupported application protocols (["hq" "h2c" "spdy/3" "spdy/2" "spdy/1" "http/1.0" "http/0.9"])
2026/05/13 20:59:56 Drop: TCP{[fd7a:115c:a1e0::401:c29f]:30044 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 20:59:56 [RATELIMIT] format("%s: %s %d %s\n%s")
2026/05/13 20:59:57 http: TLS handshake error from [fd7a:115c:a1e0::401:c29f]:30044: tls: client offered only unsupported versions: [302 301]
2026/05/13 20:59:59 http: TLS handshake error from [fd7a:115c:a1e0::1e01:7098]:51923: EOF
2026/05/13 21:00:00 http: TLS handshake error from [fd7a:115c:a1e0::401:c29f]:58496: EOF
2026/05/13 21:00:01 http: TLS handshake error from [fd7a:115c:a1e0::1e01:7098]:47940: tls: no cipher suite supported by both client and server; client offered: [16 33 67 c09e c0a2 9e 39 6b c09f c0a3 9f 45 be 88 c4 9a c008 c009 c023 c0ac c0ae c02b c00a c024 c0ad c0af c02c c072 c073 cca9 cc14 c007 c012 c013 c027 c02f c014 c028 c030 c060 c061 c076 c077 cca8 cc13 c011 a 2f 3c c09c c0a0 9c 35 3d c09d c0a1 9d 41 ba 84 c0 7 4 5]
2026/05/13 21:00:03 http: TLS handshake error from [fd7a:115c:a1e0::401:c29f]:25305: EOF
2026/05/13 21:00:25 [RATELIMIT] format("%s: %s %d %s\n%s") (4 dropped)
2026/05/13 21:00:25 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:21235 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 21:00:26 Drop: TCP{[fd7a:115c:a1e0::401:c29f]:62038 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 21:00:29 [RATELIMIT] format("%s: %s %d %s\n%s")
2026/05/13 21:01:41 magicsock: closing connection to derp-1 (idle), age 11m15s
2026/05/13 21:01:41 magicsock: 1 active derp conns: derp-27=cr21m0s,wr14m0s
2026/05/13 21:03:41 magicsock: adding connection to derp-1 for [fNXXK]
2026/05/13 21:03:41 magicsock: 2 active derp conns: derp-1=cr0s,wr0s derp-27=cr23m0s,wr16m0s
2026/05/13 21:03:41 derphttp.Client.Recv: connecting to derp-1 (nyc)
2026/05/13 21:03:42 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:43337 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 21:03:42 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:43337 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 21:03:42 magicsock: derp-1 connected; connGen=1
2026/05/13 21:03:43 [RATELIMIT] format("%s: %s %d %s\n%s")
2026/05/13 21:04:56 magicsock: closing connection to derp-1 (idle), age 1m15s
2026/05/13 21:04:56 magicsock: 1 active derp conns: derp-27=cr24m0s,wr18m0s
2026/05/13 21:07:44 magicsock: adding connection to derp-1 for [fNXXK]
2026/05/13 21:07:44 magicsock: 2 active derp conns: derp-1=cr0s,wr0s derp-27=cr27m0s,wr20m0s
2026/05/13 21:07:44 derphttp.Client.Recv: connecting to derp-1 (nyc)
2026/05/13 21:07:46 magicsock: derp-1 connected; connGen=1
2026/05/13 21:07:46 wgengine: Reconfig: configuring userspace WireGuard config (with 1/24 peers)
2026/05/13 21:08:59 magicsock: closing connection to derp-1 (idle), age 1m15s
2026/05/13 21:08:59 magicsock: 1 active derp conns: derp-27=cr29m0s,wr22m0s
2026/05/13 21:11:50 magicsock: adding connection to derp-1 for [fNXXK]
2026/05/13 21:11:50 magicsock: 2 active derp conns: derp-1=cr0s,wr0s derp-27=cr31m0s,wr24m0s
2026/05/13 21:11:50 derphttp.Client.Recv: connecting to derp-1 (nyc)
2026/05/13 21:11:51 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:30371 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 21:11:51 magicsock: derp-1 connected; connGen=1
2026/05/13 21:11:51 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:30371 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 21:11:51 [RATELIMIT] format("%s: %s %d %s\n%s")
2026/05/13 21:13:05 magicsock: closing connection to derp-1 (idle), age 1m15s
2026/05/13 21:13:05 magicsock: 1 active derp conns: derp-27=cr33m0s,wr26m0s
2026/05/13 21:14:30 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:42814 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 21:14:30 magicsock: adding connection to derp-1 for [fNXXK]
2026/05/13 21:14:30 magicsock: 2 active derp conns: derp-1=cr0s,wr0s derp-27=cr34m0s,wr27m0s
2026/05/13 21:14:30 derphttp.Client.Recv: connecting to derp-1 (nyc)
2026/05/13 21:14:31 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:42814 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 21:14:31 [RATELIMIT] format("%s: %s %d %s\n%s")
2026/05/13 21:14:31 magicsock: derp-1 connected; connGen=1
2026/05/13 21:14:33 wgengine: idle peer [ZTKE5] now active, reconfiguring WireGuard
2026/05/13 21:14:33 wgengine: Reconfig: configuring userspace WireGuard config (with 2/24 peers)
2026/05/13 21:15:17 [RATELIMIT] format("%s: %s %d %s\n%s") (2 dropped)
2026/05/13 21:15:17 Drop: TCP{[fd7a:115c:a1e0::401:c29f]:26048 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 21:16:45 magicsock: closing connection to derp-1 (idle), age 2m15s
2026/05/13 21:16:45 magicsock: 1 active derp conns: derp-27=cr36m0s,wr29m0s
2026/05/13 21:23:01 Received error: PollNetMap: unexpected EOF
2026/05/13 21:23:01 magicsock: [0x1a9316a0e140] derp.Recv(derp-27): derp.Recv: EOF
2026/05/13 21:23:01 derphttp.Client.Recv: connecting to derp-27 (iad)
2026/05/13 21:23:01 control: controlhttp: forcing port 443 dial due to recent noise dial
2026/05/13 21:23:01 netcheck: DetectCaptivePortal(found=false)
2026/05/13 21:23:02 magicsock: endpoints changed: 172.93.100.166:54099 (stun), 192.168.0.2:54099 (local), 198.18.64.7:54099 (local)
2026/05/13 21:23:02 health(warnable=no-derp-connection): ok
2026/05/13 21:23:04 magicsock: [0x1a9316a0e140] derp.Recv(derp-27): derphttp.Client.Recv connect to region 27 (iad): read tcp4 198.18.64.7:57213->178.156.152.91:443: read: connection reset by peer
2026/05/13 21:23:04 health(warnable=no-derp-connection): ok
2026/05/13 21:23:04 derphttp.Client.Recv: connecting to derp-27 (iad)
2026/05/13 21:23:04 logtail: upload: log upload of 1698 bytes compressed failed: Post "https://log.tailscale.com/c/tailnode.log.tailscale.io/a8666873a6609a8a19b31891c3c2b3462f340cdc14032c525b737706f16acc5f": EOF
2026/05/13 21:23:05 control: controlhttp: failed dialing using DialPlan, falling back to DNS; errs=all connection attempts failed (HTTP: dial tcp [2606:b740:49::108]:80: connect: no route to host, HTTPS: dial tcp [2606:b740:49::108]:443: connect: no route to host)
all connection attempts failed (HTTP: TLS forced: no port 80 dialed, HTTPS: dial tcp [2606:b740:49::107]:443: connect: no route to host)
all connection attempts failed (HTTP: TLS forced: no port 80 dialed, HTTPS: dial tcp [2606:b740:49::104]:443: connect: no route to host)
all connection attempts failed (HTTP: TLS forced: no port 80 dialed, HTTPS: dial tcp [2606:b740:49::106]:443: connect: no route to host)
all connection attempts failed (HTTP: TLS forced: no port 80 dialed, HTTPS: read tcp 198.18.64.7:57186->192.200.0.108:443: read: connection reset by peer)
all connection attempts failed (HTTP: TLS forced: no port 80 dialed, HTTPS: read tcp 198.18.64.7:57215->192.200.0.106:443: read: connection reset by peer)
all connection attempts failed (HTTP: TLS forced: no port 80 dialed, HTTPS: read tcp 198.18.64.7:57202->192.200.0.107:443: read: connection reset by peer)
all connection attempts failed (HTTP: TLS forced: no port 80 dialed, HTTPS: read tcp 198.18.64.7:57207->192.200.0.104:443: read: connection reset by peer)
2026/05/13 21:23:05 magicsock: [0x1a9316a0e140] derp.Recv(derp-27): derphttp.Client.Recv connect to region 27 (iad): read tcp4 198.18.64.7:57225->5.161.218.233:443: read: connection reset by peer
2026/05/13 21:23:05 health(warnable=no-derp-connection): ok
2026/05/13 21:23:05 derphttp.Client.Recv: connecting to derp-27 (iad)
2026/05/13 21:23:06 magicsock: [0x1a9316a0e140] derp.Recv(derp-27): derphttp.Client.Recv connect to region 27 (iad): read tcp4 198.18.64.7:57242->5.161.218.233:443: read: connection reset by peer
2026/05/13 21:23:06 health(warnable=no-derp-connection): ok
2026/05/13 21:23:06 derphttp.Client.Recv: connecting to derp-27 (iad)
2026/05/13 21:23:07 control: controlhttp: forcing port 443 dial due to recent noise dial
2026/05/13 21:23:07 Received error: PollNetMap: Post "https://controlplane.tailscale.com/machine/map": all connection attempts failed (HTTP: TLS forced: no port 80 dialed, HTTPS: EOF)
2026/05/13 21:23:09 health(warnable=no-derp-connection): ok
2026/05/13 21:23:09 health(warnable=no-derp-connection): ok
2026/05/13 21:23:09 [RATELIMIT] format("health(warnable=%s): ok")
2026/05/13 21:23:09 magicsock: derp-27 connected; connGen=2
2026/05/13 21:23:11 control: netmap: got new dial plan from control
2026/05/13 21:23:11 netmap: suggested exit node:  ()
2026/05/13 21:23:11 wgengine: Reconfig: configuring userspace WireGuard config (with 0/24 peers)
2026/05/13 21:23:55 logtail: upload succeeded after 1 failures and 51s
2026/05/13 21:40:29 wgengine: idle peer [ZTKE5] now active, reconfiguring WireGuard
2026/05/13 21:40:29 wgengine: Reconfig: configuring userspace WireGuard config (with 1/24 peers)
2026/05/13 21:40:29 magicsock: adding connection to derp-1 for [ZTKE5]
2026/05/13 21:40:29 magicsock: 2 active derp conns: derp-1=cr0s,wr0s derp-27=cr1h0m0s,wr53m0s
2026/05/13 21:40:29 derphttp.Client.Recv: connecting to derp-1 (nyc)
2026/05/13 21:40:31 Drop: TCP{[fd7a:115c:a1e0::401:c29f]:34247 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 21:40:31 magicsock: derp-1 connected; connGen=1
2026/05/13 21:40:31 Drop: TCP{[fd7a:115c:a1e0::401:c29f]:34247 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 21:40:32 [RATELIMIT] format("%s: %s %d %s\n%s")
2026/05/13 21:40:34 wgengine: idle peer [fNXXK] now active, reconfiguring WireGuard
2026/05/13 21:40:34 http: TLS handshake error from [fd7a:115c:a1e0::401:c29f]:46594: EOF
2026/05/13 21:40:34 wgengine: Reconfig: configuring userspace WireGuard config (with 2/24 peers)
2026/05/13 21:40:36 http: TLS handshake error from [fd7a:115c:a1e0::1e01:7098]:25490: EOF
2026/05/13 21:40:37 http: TLS handshake error from [fd7a:115c:a1e0::401:c29f]:53821: EOF
2026/05/13 21:40:38 http: TLS handshake error from [fd7a:115c:a1e0::1e01:7098]:18467: tls: client requested unsupported application protocols (["http/0.9" "http/1.0" "spdy/1" "spdy/2" "spdy/3" "h2c" "hq"])
2026/05/13 21:40:40 http: TLS handshake error from [fd7a:115c:a1e0::401:c29f]:50078: tls: client requested unsupported application protocols (["hq" "h2c" "spdy/3" "spdy/2" "spdy/1" "http/1.0" "http/0.9"])
2026/05/13 21:40:40 [RATELIMIT] format("%s: %s %d %s\n%s") (5 dropped)
2026/05/13 21:40:40 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:56698 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 21:40:41 http: TLS handshake error from [fd7a:115c:a1e0::1e01:7098]:56698: tls: client offered only unsupported versions: [302 301]
2026/05/13 21:40:41 Drop: TCP{[fd7a:115c:a1e0::401:c29f]:26869 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 21:40:41 [RATELIMIT] format("%s: %s %d %s\n%s")
2026/05/13 21:40:43 http: TLS handshake error from [fd7a:115c:a1e0::401:c29f]:26869: EOF
2026/05/13 21:40:44 http: TLS handshake error from [fd7a:115c:a1e0::1e01:7098]:21653: EOF
2026/05/13 21:40:45 http: TLS handshake error from [fd7a:115c:a1e0::401:c29f]:34791: tls: no cipher suite supported by both client and server; client offered: [16 33 67 c09e c0a2 9e 39 6b c09f c0a3 9f 45 be 88 c4 9a c008 c009 c023 c0ac c0ae c02b c00a c024 c0ad c0af c02c c072 c073 cca9 cc14 c007 c012 c013 c027 c02f c014 c028 c030 c060 c061 c076 c077 cca8 cc13 c011 a 2f 3c c09c c0a0 9c 35 3d c09d c0a1 9d 41 ba 84 c0 7 4 5]
2026/05/13 21:40:46 http: TLS handshake error from [fd7a:115c:a1e0::1e01:7098]:31555: EOF
2026/05/13 21:41:56 [RATELIMIT] format("%s: %s %d %s\n%s") (4 dropped)
2026/05/13 21:41:56 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:20453 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 21:41:57 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:34663 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 21:41:57 [RATELIMIT] format("%s: %s %d %s\n%s")
2026/05/13 21:43:47 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:41613 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 21:46:59 magicsock: closing connection to derp-1 (idle), age 6m30s
2026/05/13 21:46:59 magicsock: 1 active derp conns: derp-27=cr1h7m0s,wr1h0m0s
2026/05/13 21:47:57 wgengine: Reconfig: configuring userspace WireGuard config (with 1/24 peers)
2026/05/13 21:51:55 wgengine: idle peer [ZTKE5] now active, reconfiguring WireGuard
2026/05/13 21:51:55 wgengine: Reconfig: configuring userspace WireGuard config (with 2/24 peers)
2026/05/13 21:51:55 Drop: TCP{[fd7a:115c:a1e0::401:c29f]:40615 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 21:53:29 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:25504 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 21:53:29 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:25504 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 21:53:30 http: TLS handshake error from [fd7a:115c:a1e0::1e01:7098]:25504: EOF
2026/05/13 21:53:43 netmap: suggested exit node:  ()
2026/05/13 21:53:43 wgengine: Reconfig: user dialer
2026/05/13 21:53:43 tsdial: bart table size: 4
2026/05/13 21:53:43 wgengine: Reconfig: configuring DNS
2026/05/13 21:53:43 dns: Set: {DefaultResolvers:[] Routes:{tail75be91.ts.net.:[] ts.net.:[199.247.155.53 2620:111:8007::53]}+65arpa SearchDomains:[tail75be91.ts.net.] Hosts:4}
2026/05/13 21:53:43 dns: Resolvercfg: {Routes:{ts.net.:[199.247.155.53 2620:111:8007::53]} Hosts:4 LocalDomains:[tail75be91.ts.net.]+65arpa}
2026/05/13 21:53:43 dns: OScfg: {Nameservers:[100.100.100.100 fd7a:115c:a1e0::53] SearchDomains:[tail75be91.ts.net.] MatchDomains:[tail75be91.ts.net. ts.net.]+65arpa}
2026/05/13 21:53:44 netmap: suggested exit node:  ()
2026/05/13 21:53:44 wgengine: Reconfig: configuring userspace WireGuard config (with 2/25 peers)
2026/05/13 21:53:44 wgengine: Reconfig: configuring router
2026/05/13 21:53:44 wgengine: Reconfig: user dialer
2026/05/13 21:53:44 tsdial: bart table size: 4
2026/05/13 21:53:44 wgengine: Reconfig: configuring DNS
2026/05/13 21:53:44 dns: Set: {DefaultResolvers:[] Routes:{tail75be91.ts.net.:[] ts.net.:[199.247.155.53 2620:111:8007::53]}+65arpa SearchDomains:[tail75be91.ts.net.] Hosts:4}
2026/05/13 21:53:44 dns: Resolvercfg: {Routes:{ts.net.:[199.247.155.53 2620:111:8007::53]} Hosts:4 LocalDomains:[tail75be91.ts.net.]+65arpa}
2026/05/13 21:53:44 dns: OScfg: {Nameservers:[100.100.100.100 fd7a:115c:a1e0::53] SearchDomains:[tail75be91.ts.net.] MatchDomains:[tail75be91.ts.net. ts.net.]+65arpa}
2026/05/13 21:53:44 netmap: suggested exit node:  ()
2026/05/13 21:53:53 Drop: TCP{[fd7a:115c:a1e0::1e01:7098]:28979 > [fd7a:115c:a1e0::363b:736d]:34450} 80 no rules matched
2026/05/13 21:53:54 http: TLS handshake error from [fd7a:115c:a1e0::1e01:7098]:28979: EOF
2026/05/13 21:53:55 netstack: decrementing connsInFlightByClient[fd7a:115c:a1e0::1e01:7098] because the packet was not handled; new value is 0
2026/05/13 21:53:55 netstack: decrementing connsInFlightByClient[fd7a:115c:a1e0::1e01:7098] because the packet was not handled; new value is 0
2026/05/13 21:53:55 netstack: decrementing connsInFlightByClient[fd7a:115c:a1e0::1e01:7098] because the packet was not handled; new value is 0
2026/05/13 21:54:26 wgengine: idle peer [NeNIS] now active, reconfiguring WireGuard
2026/05/13 21:54:26 wgengine: Reconfig: configuring userspace WireGuard config (with 3/25 peers)
2026/05/13 21:54:26 magicsock: disco: node [NeNIS] d:b330a7e20c02a736 now using 192.168.0.26:61335 mtu=1360 tx=09425ec3df06
2026/05/13 21:54:26 netcheck: DetectCaptivePortal(found=false)
2026/05/13 21:54:26 netstack: could not connect to local backend server at 127.0.0.1:2222: dial tcp 127.0.0.1:2222: connect: connection refused
2026/05/13 21:54:26 backend -> client close connection: close tcp 127.0.0.1:59687->127.0.0.1:5900: shutdown: socket is not connected
2026/05/13 21:54:26 backend -> client close connection: close tcp 127.0.0.1:59685->127.0.0.1:22: shutdown: socket is not connected
2026/05/13 21:54:27 magicsock: endpoints changed: 172.93.100.166:55372 (stun), 192.168.0.2:54099 (local), 198.18.64.7:54099 (local)
2026/05/13 21:54:44 backend -> client close connection: close tcp 127.0.0.1:59710->127.0.0.1:22: shutdown: socket is not connected
2026/05/13 21:54:52 backend -> client close connection: close tcp 127.0.0.1:59741->127.0.0.1:22: shutdown: socket is not connected
2026/05/13 21:55:10 backend -> client close connection: close tcp 127.0.0.1:59764->127.0.0.1:22: shutdown: socket is not connected
2026/05/13 21:55:10 backend -> client close connection: close tcp 127.0.0.1:59767->127.0.0.1:22: shutdown: socket is not connected
2026/05/13 21:55:10 backend -> client close connection: close tcp 127.0.0.1:59766->127.0.0.1:22: shutdown: socket is not connected
2026/05/13 21:55:10 backend -> client close connection: close tcp 127.0.0.1:59768->127.0.0.1:22: shutdown: socket is not connected
2026/05/13 21:55:10 backend -> client close connection: close tcp 127.0.0.1:59769->127.0.0.1:22: shutdown: socket is not connected
2026/05/13 21:55:10 [RATELIMIT] format("backend -> client close connection: %v")
2026/05/13 21:55:20 [RATELIMIT] format("backend -> client close connection: %v") (1 dropped)
2026/05/13 21:55:20 backend -> client close connection: close tcp 127.0.0.1:59786->127.0.0.1:22: shutdown: socket is not connected
2026/05/13 21:55:33 backend -> client close connection: close tcp 127.0.0.1:59794->127.0.0.1:22: shutdown: socket is not connected
2026/05/13 21:55:33 backend -> client close connection: close tcp 127.0.0.1:59795->127.0.0.1:22: shutdown: socket is not connected
2026/05/13 21:55:33 backend -> client close connection: close tcp 127.0.0.1:59792->127.0.0.1:22: shutdown: socket is not connected
2026/05/13 21:55:33 backend -> client close connection: close tcp 127.0.0.1:59793->127.0.0.1:22: shutdown: socket is not connected
2026/05/13 21:55:33 [RATELIMIT] format("backend -> client close connection: %v")
2026/05/13 21:55:56 backend -> client close connection: close tcp 127.0.0.1:59857->127.0.0.1:22: shutdown: socket is not connected
2026/05/13 21:55:56 backend -> client close connection: close tcp 127.0.0.1:59859->127.0.0.1:22: shutdown: socket is not connected
2026/05/13 21:55:56 backend -> client close connection: close tcp 127.0.0.1:59858->127.0.0.1:22: shutdown: socket is not connected
2026/05/13 21:56:03 control: NetInfo: NetInfo{varies=true ipv6=false ipv6os=true udp=true icmpv4=false derp=#27 portmap= link="" firewallmode=""}
2026/05/13 21:56:03 magicsock: endpoints changed: 172.93.100.166:55372 (stun), 172.93.100.166:54488 (stun), 192.168.0.2:54099 (local), 198.18.64.7:54099 (local)
2026/05/13 21:56:04 backend -> client close connection: close tcp 127.0.0.1:59861->127.0.0.1:22: shutdown: socket is not connected
2026/05/13 21:56:27 control: NetInfo: NetInfo{varies=false ipv6=false ipv6os=true udp=true icmpv4=false derp=#27 portmap= link="" firewallmode=""}
2026/05/13 21:56:27 backend -> client close connection: close tcp 127.0.0.1:59862->127.0.0.1:22: shutdown: socket is not connected
2026/05/13 21:58:46 wgengine: Reconfig: configuring userspace WireGuard config (with 2/25 peers)
2026/05/13 21:58:46 magicsock: adding connection to derp-17 for [NeNIS]
2026/05/13 21:58:46 magicsock: 2 active derp conns: derp-17=cr0s,wr0s derp-27=cr1h18m0s,wr4m0s
2026/05/13 21:58:46 derphttp.Client.Recv: connecting to derp-17 (lax)
2026/05/13 21:58:46 backend -> client close connection: close tcp 127.0.0.1:60029->127.0.0.1:22: shutdown: socket is not connected
2026/05/13 21:58:47 magicsock: home DERP changing from derp-27 [340ms] to derp-1 [760ms]
2026/05/13 21:58:47 magicsock: home is now derp-1 (nyc)
2026/05/13 21:58:47 magicsock: adding connection to derp-1 for home-keep-alive
2026/05/13 21:58:47 magicsock: 3 active derp conns: derp-1=cr0s,wr0s derp-17=cr2s,wr2s derp-27=cr1h18m0s,wr4m0s
2026/05/13 21:58:47 derphttp.Client.Recv: connecting to derp-1 (nyc)
2026/05/13 21:58:47 control: NetInfo: NetInfo{varies=false ipv6=false ipv6os=true udp=true icmpv4=false derp=#1 portmap= link="" firewallmode=""}
2026/05/13 21:58:48 magicsock: derp-17 connected; connGen=1
2026/05/13 21:58:49 magicsock: derp-1 connected; connGen=1
2026/05/13 21:58:49 [RATELIMIT] format("health(warnable=%s): ok") (1 dropped)
2026/05/13 21:58:49 health(warnable=no-derp-connection): ok
2026/05/13 21:58:52 backend -> client close connection: close tcp 127.0.0.1:60034->127.0.0.1:22: shutdown: socket is not connected
2026/05/13 21:58:54 tailscaled got signal terminated; shutting down
2026/05/13 21:58:54 canceling captive portal context
2026/05/13 21:58:54 control: client.Shutdown ...
2026/05/13 21:58:54 control: updateRoutine: exiting
2026/05/13 21:58:54 control: authRoutine: exiting
2026/05/13 21:58:54 control: mapRoutine: exiting
2026/05/13 21:58:54 control: Client.Shutdown done.
2026/05/13 21:58:54 ipnext: work queue shutdown failed: execqueue shut down
2026/05/13 21:58:54 magicsock: closing connection to derp-17 (conn-close), age 8s
2026/05/13 21:58:54 magicsock: closing connection to derp-1 (conn-close), age 7s
2026/05/13 21:58:54 magicsock: closing connection to derp-27 (conn-close), age 1h18m28s
2026/05/13 21:58:54 magicsock: 0 active derp conns
2026/05/13 21:58:54 flushing log.
2026/05/13 21:58:54 logger closing down