In FRR's guide, we could consider to stop bridge learning on VXLAN interface to let EVPN control it.
And enable neigh_suppress to cut ARP broadcast traffic into VXLAN tunnel.
https://docs.frrouting.org/en/latest/evpn.html#linux-interface-configuration
ip link set vni100 type bridge_slave neigh_suppress on learning off