Pointing out there is an issue at least on this device (and possibly other DSA devices) when:
- multiple 5 GHz interfaces are configured
- the 5 GHz channel uses DFS/CAC
- you use VLAN filtering and the secondary 5 GHz interfaces are configured on non-default VLANs.
Then VLANs can get wrongly assigned on the secondary 5 GHz interfaces.
The gory details are in Github issue #12668.