Try to change br-lan’s linklayer to ethernet like interface eth0
and set value upload bigger than 0 for ingress I guess.