You have to decide: either ports ether7, ether17, ether 22 and ether24 are untagged for VLAN 69 … in which case they should keep PVID settings (customer-vid=0 new-customer-vid=69) but should not be set as tagged ports on egress. Or they are tagged ports for VLAN 69 … in which case they should not have PVID settings configured and should remain set as tagged for egress.
As things are now, if device connected to one of these ports “talks” untagged frames, then on ingress those frames get tagged … but on egress remain tagged (VLAN tag does not get stripped). Which in principle should not work at all, while in reality if that device is Windows it might work (because many Windows NIC drivers, if not configured for VLAN, silently strip VLAN headers on ingress) but possibly not in all cases.
BTW, in case nobody mentioned it yet: CRS125 is a switch, not router. Yes, since it’s running ROS, it can route … but at very low speed (200Mbps, give or take) and having fasttrack enabled helps a lot. But, as you noticed, fasttrack does take shortcuts to achieve that speed-up .. and taking shortcuts has always potential to break things.