I don't see anything that jumps out at me that would cause the problem that you are seeing. About the only config change you may want to try (although it should not matter) is to change the NVR and FO connections on the VLAN tab to VLAN Mode = Disabled and VLAN Receive = Untagged Only. May also try under Egress, change VLAN Header to Always strip. That gets your untagged ports configured exactly the way I have mine - however I am running VLANs on all of my switches, so a little different environment... As I said, that should not make any difference.
There are a couple curiosities however.
On the 172.16.x.x switch, I was expecting to see five link ports active - four electrical interfaces for the four NVRs, and the SFP for the FO link. I see a sixth port (port 1 being the oddball). I am gathering that the NVRs are plugged into ports 2 - 5 and port 1 I can't account for - or did you plug a computer into that port to make these screen captures?
On the 192.168.x.x. switch, I assume you are again using ports 2 - 5 for the NVRs. You appear to have the SFP and port 1 configured for RSTP, but port 1 is not active. What is (or was) plugged into port 1?
On both switches, I would turn off PoE Out since presumably the NVRs don't need it, and in the case of the 192.168.x.x switch, it shows as causing an error. Yes, it shouldn't matter, but I would still turn it off. That somewhat begs the question, why did you buy the more expensive PoE version of the switch since you presumably knew you would not be using the PoE capability? In my case, I have one PoE version that is powering three Ubiquiti Rocket radios, but the other CSS106 and my older RB260GS are both non-PoE.
I find it interesting that apparently the NVRs support Gig-E on the access side, but only 100M on the camera side.
BTW, I prefer to name the ports as it helps avoid confusion (more of an issue with larger switches). Here is a screen capture of the VLAN tab on one of my CSS106 switches. Remember that I am in a VLAN environment, hence the Strict VLAN mode. Ports 3 - 5 are untagged. Ports 1 & 2 need both tagged and untagged traffic, and the trunk on the SFP is tagged only.