hmm, yeah, VLAN 1 is the default "no vlan configured" one. If you only have the vmbr0 and assign the VLAN tag in the VMs virtual NIC, any packet leaving the node should be tagged accordingly.
Maybe run some tcpdump on vmbr0, or the underlying physical NIC enp0s316f6? To see if the packets from...