Same here, even earlier - after just a few MB. Also observed freshly after reboot, with and without packet steering and regardless of software offloading setting:
Log
:: ~ » wget https://ftp.icm.edu.pl/pub/Linux/fedora/linux/releases/34/Workstation/x86_64/iso/Fedora-Workstation-Live-x86_64-34-1.2.iso 130 ↵
--2021-07-30 06:42:15-- https://ftp.icm.edu.pl/pub/Linux/fedora/linux/releases/34/Workstation/x86_64/iso/Fedora-Workstation-Live-x86_64-34-1.2.iso
Resolving ftp.icm.edu.pl (ftp.icm.edu.pl)... 193.219.28.2
Connecting to ftp.icm.edu.pl (ftp.icm.edu.pl)|193.219.28.2|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2007367680 (1,9G) [application/octet-stream]
Saving to: ‘Fedora-Workstation-Live-x86_64-34-1.2.iso.3’
Fedora-Workstation-Live-x86_64-34-1.2.iso.3 0%[ ] 160,00K 603KB/s in 0,3s
2021-07-30 06:42:16 (603 KB/s) - Read error at byte 163840/2007367680 (Decryption has failed.). Retrying.
--2021-07-30 06:42:17-- (try: 2) https://ftp.icm.edu.pl/pub/Linux/fedora/linux/releases/34/Workstation/x86_64/iso/Fedora-Workstation-Live-x86_64-34-1.2.iso
Connecting to ftp.icm.edu.pl (ftp.icm.edu.pl)|193.219.28.2|:443... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 2007367680 (1,9G), 2007203840 (1,9G) remaining [application/octet-stream]
Saving to: ‘Fedora-Workstation-Live-x86_64-34-1.2.iso.3’
Fedora-Workstation-Live-x86_64-34-1.2.iso.3 0%[ ] 416,00K 892KB/s in 0,3s
2021-07-30 06:42:17 (892 KB/s) - Read error at byte 425984/2007367680 (Decryption has failed.). Retrying.
--2021-07-30 06:42:19-- (try: 3) https://ftp.icm.edu.pl/pub/Linux/fedora/linux/releases/34/Workstation/x86_64/iso/Fedora-Workstation-Live-x86_64-34-1.2.iso
Connecting to ftp.icm.edu.pl (ftp.icm.edu.pl)|193.219.28.2|:443... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 2007367680 (1,9G), 2006941696 (1,9G) remaining [application/octet-stream]
Saving to: ‘Fedora-Workstation-Live-x86_64-34-1.2.iso.3’
Fedora-Workstation-Live-x86_64-34-1.2.iso.3 0%[ ] 528,00K 584KB/s in 0,2s
2021-07-30 06:42:21 (584 KB/s) - Read error at byte 540672/2007367680 (Decryption has failed.). Retrying.
--2021-07-30 06:42:24-- (try: 4) https://ftp.icm.edu.pl/pub/Linux/fedora/linux/releases/34/Workstation/x86_64/iso/Fedora-Workstation-Live-x86_64-34-1.2.iso
Connecting to ftp.icm.edu.pl (ftp.icm.edu.pl)|193.219.28.2|:443... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 2007367680 (1,9G), 2006827008 (1,9G) remaining [application/octet-stream]
Saving to: ‘Fedora-Workstation-Live-x86_64-34-1.2.iso.3’
Fedora-Workstation-Live-x86_64-34-1.2.iso.3 0%[ ] 2,97M 1,72MB/s in 1,4s
2021-07-30 06:42:25 (1,72 MB/s) - Read error at byte 3112960/2007367680 (Decryption has failed.). Retrying.
--2021-07-30 06:42:29-- (try: 5) https://ftp.icm.edu.pl/pub/Linux/fedora/linux/releases/34/Workstation/x86_64/iso/Fedora-Workstation-Live-x86_64-34-1.2.iso
Connecting to ftp.icm.edu.pl (ftp.icm.edu.pl)|193.219.28.2|:443... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 2007367680 (1,9G), 2004254720 (1,9G) remaining [application/octet-stream]
Saving to: ‘Fedora-Workstation-Live-x86_64-34-1.2.iso.3’
Fedora-Workstation-Live-x86_64-34-1.2.iso.3 0%[ ] 3,19M 977KB/s in 0,2s
2021-07-30 06:42:30 (977 KB/s) - Read error at byte 3342336/2007367680 (Decryption has failed.). Retrying.
--2021-07-30 06:42:35-- (try: 6) https://ftp.icm.edu.pl/pub/Linux/fedora/linux/releases/34/Workstation/x86_64/iso/Fedora-Workstation-Live-x86_64-34-1.2.iso
Connecting to ftp.icm.edu.pl (ftp.icm.edu.pl)|193.219.28.2|:443... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 2007367680 (1,9G), 2004025344 (1,9G) remaining [application/octet-stream]
Saving to: ‘Fedora-Workstation-Live-x86_64-34-1.2.iso.3’
Fedora-Workstation-Live-x86_64-34-1.2.iso.3 0%[ ] 5,19M 2,97MB/s in 0,7s
2021-07-30 06:42:36 (2,97 MB/s) - Read error at byte 5439488/2007367680 (Decryption has failed.). Retrying.
--2021-07-30 06:42:42-- (try: 7) https://ftp.icm.edu.pl/pub/Linux/fedora/linux/releases/34/Workstation/x86_64/iso/Fedora-Workstation-Live-x86_64-34-1.2.iso
Connecting to ftp.icm.edu.pl (ftp.icm.edu.pl)|193.219.28.2|:443... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 2007367680 (1,9G), 2001928192 (1,9G) remaining [application/octet-stream]
Saving to: ‘Fedora-Workstation-Live-x86_64-34-1.2.iso.3’
Fedora-Workstation-Live-x86_64-34-1.2.iso.3 0%[ ] 5,28M 433KB/s in 0,2s
2021-07-30 06:42:43 (433 KB/s) - Read error at byte 5537792/2007367680 (Decryption has failed.). Retrying.
If I understand correctly NSS is on:
1070 root 0 IW< [nss_data_plane_]
1073 root 0 IW< [nss_freq_queue]
Directly from AX3600 works fine:
Log
root@router:~# wget https://ftp.icm.edu.pl/pub/Linux/fedora/linux/releases/34/Wo
rkstation/x86_64/iso/Fedora-Workstation-Live-x86_64-34-1.2.iso -O /dev/null
--2021-07-30 06:59:16-- https://ftp.icm.edu.pl/pub/Linux/fedora/linux/releases/34/Workstation/x86_64/iso/Fedora-Workstation-Live-x86_64-34-1.2.iso
Resolving ftp.icm.edu.pl... 193.219.28.2
Connecting to ftp.icm.edu.pl|193.219.28.2|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2007367680 (1.9G) [application/octet-stream]
Saving to: '/dev/null'
/dev/null 100%[===================>] 1.87G 34.5MB/s in 55s
2021-07-30 07:00:12 (34.6 MB/s) - '/dev/null' saved [2007367680/2007367680]
Fine also while connected over WiFi. MTU mismatch?