kex_exchange_identification: read: Connection reset

[canghaiwuhen]

System：PVE 8.2/ESXi 8.0
VirtualPC: Ubuntu 20.04
Docker Version: 27.3.1
Zerotier 1.14.2
netcard: ens160 vlan81 192.168.81.57, ens192 vlan82 192.168.82.57, ens224 novlan 192.168.8.57

docker network create -d macvlan --subnet=192.168.8.0/24 --gateway=192.168.8.1 -o parent=ens224 net8
docker run -d \
--name zt85 \
--net=net8 \
--ip 192.168.8.105 \
--cap-add NET_ADMIN \
--device /dev/net/tun \
--restart=unless-stopped \
zerotier/zerotier:latest

zt can access the network, zt other devices can ping the devices in the LAN, but ssh reports an error.
kex_exchange_identification: read: Connection reset

If do not use Docker and test directly on a physical machine, you will find that as long as there is a VLAN in the network and there is no untag network port, ZT will report an error when accessing SSH, and the PVE/ESXi web page will not be opened.

It is suspected to be related to vlan.