In marketing cloud we have two business unit, parent and child, i created a user in child, but it also automatically created in parent. Is it an expected behaviour

Yes, that’s the expected behaviour. Furthermore, you need to grant access only to the intended Business Unit (BU), which will help ensure compliance with the least-privilege policy.