VRRP advertisements hit control-plane policing and the backup never sees master loss

Both routers are online, but failover stalls because the protection policy drops the very control traffic that should signal the state change.