You can only hardware offload on one bridge at a time. Remove the wan bridge, as it is not a bridged interface by default.