Many thanks for your additional details.
I have seen that your routes are 10.9/16 as well as 172.16/16... Please correct me if I am mistaken on it.
Also, I noticed that you have some utun interfaces and If i recall those are for Globalprotect for PA.
If you do a traceroute or ping... Did you get to the remote VM?
BR,