Hello@ster,
Becuase VRRP is associated with PWs on the Device 2 and Device 4 interfaces connecting to the BRASs so that the PW interface of the backup device does not receive or forward VXLAN traffic. Therefor user access packets are broadcast to both Device 2 and Device 4 in the VSI. Because PW packets are blocked on the backup device, only the master device forwards the user access packets.
Glad to help you! Any further questions, let us know.