Mt7921u AP mode crashes on 23.05.0

With 23.05.0 on Linksys WRT1900ACv2, I plugged the Comfast CF-953AX on USB 3 port (direct connection, no angled/extension cable), loaded kmod-mt7921u with firmware packages, after a reboot I can see it working. But after doing a few speed test with it, it crashed and WiFi AP is gone.

At the beginning I thought it was router hangs, but ethernet access is good and internet works with cable, following kernel messages showing up. Looking at changelog of 23.05.0-rc3 this is supposed to be fixed, how should I troubleshoot this?

[ 2318.064772] mt7921u 6-1:1.3: Message 00020002 (seq 6) timeout
[ 2318.284722] mt7921u 6-1:1.3: timed out waiting for pending tx
[ 2318.308533] ------------[ cut here ]------------
[ 2318.308941] WARNING: CPU: 6 PID: 9078 at kernel/kthread.c:659 kthread_park+0xac/0xc0
[ 2318.309625] Modules linked in: ath9k ath9k_common rtw89_8852ce rtw89_8852c rtw89_8852be rtw89_8852b rtw89_8852ae rtw89_8852a rtw88_8822cu rtw88_8822ce rtw88_8822c rtw88_8822bu rtw88_8822be rtw88_8822b rtw88_8821cu rtw88_8821ce rtw88_8821c rtw88_8723du rtw88_8723de rtw88_8723d rtl8821ae rtl_pci mt7921u mt7921e mt7921_common btcoexist ath9k_hw ath10k_pci ath10k_core ath wireguard rtw89_pci rtw89_core rtw88_usb rtw88_pci rtw88_core rtlwifi rtl8812au rndis_host pppoe nft_fib_inet nf_flow_table_inet mt792x_usb mt792x_lib mt7915e mt76x2u mt76x2_common mt76x02_usb mt76x02_lib mt76_usb mt76_connac_lib mt76 mac80211 libchacha20poly1305 l2tp_ppp ipt_REJECT chacha_neon cfg80211 cdc_ncm cdc_ether zstd xt_time xt_tcpudp xt_tcpmss xt_statistic xt_state xt_quota xt_pkttype xt_physdev xt_owner xt_nat xt_multiport xt_mark xt_mac xt_limit xt_length xt_hl xt_ecn xt_dscp xt_conntrack xt_comment xt_cgroup xt_addrtype xt_TCPMSS xt_REDIRECT xt_MASQUERADE xt_LOG xt_HL xt_DSCP xt_CLASSIFY usbnet usblp ums_usbat
[ 2318.309789]  ums_sddr55 ums_sddr09 ums_karma ums_jumpshot ums_isd200 ums_freecom ums_datafab ums_cypress ums_alauda ts_fsm ts_bm sch_cake rfcomm r8169 r8152 pptp pppox ppp_mppe ppp_async poly1305_neon nft_reject_ipv6 nft_reject_ipv4 nft_reject_inet nft_reject nft_redir nft_quota nft_objref nft_numgen nft_nat nft_masq nft_log nft_limit nft_hash nft_flow_offload nft_fib_ipv6 nft_fib_ipv4 nft_fib nft_ct nft_compat nft_chain_nat nf_tables nf_reject_ipv4 nf_nat_tftp nf_nat_snmp_basic nf_nat_sip nf_nat_pptp nf_nat_irc nf_nat_h323 nf_nat_ftp nf_nat_amanda nf_log_syslog nf_flow_table nf_conntrack_tftp nf_conntrack_snmp nf_conntrack_sip nf_conntrack_pptp nf_conntrack_netlink nf_conntrack_irc nf_conntrack_h323 nf_conntrack_ftp nf_conntrack_broadcast ts_kmp nf_conntrack_amanda macvlan lzo_rle lzo libcurve25519_generic libchacha iptable_nat iptable_mangle iptable_filter ipt_ECN ipheth ip_tables hidp hci_uart crc_ccitt compat btusb btrtl btmtk btintel br_netfilter bnep bluetooth asn1_decoder fuse
[ 2318.317489]  ntfs3 sch_tbf sch_ingress sch_htb sch_hfsc em_u32 cls_u32 cls_route cls_matchall cls_fw cls_flow cls_basic act_skbedit act_mirred act_gact configs pwm_fan gpio_fan cryptodev xt_set ip_set_list_set ip_set_hash_netportnet ip_set_hash_netport ip_set_hash_netnet ip_set_hash_netiface ip_set_hash_net ip_set_hash_mac ip_set_hash_ipportnet ip_set_hash_ipportip ip_set_hash_ipport ip_set_hash_ipmark ip_set_hash_ipmac ip_set_hash_ip ip_set_bitmap_port ip_set_bitmap_ipmac ip_set_bitmap_ip ip_set nfnetlink ip6table_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip6t_NPT ip6table_mangle ip6table_filter ip6_tables ip6t_REJECT x_tables nf_reject_ipv6 pppoatm ppp_generic slhc ip_gre gre ifb dummy l2tp_netlink l2tp_core oid_registry ip_tunnel veth tun xfrm_user xfrm_ipcomp af_key xfrm_algo hfsplus hfs cdrom autofs4 br2684 atm nls_utf8 nls_cp437 vxlan udp_tunnel ip6_udp_tunnel wp512 twofish_generic twofish_common tea serpent_generic khazad cast6_generic cast5_generic cast_common
[ 2318.325166]  camellia_generic blowfish_generic blowfish_common anubis ecdh_generic ecc xts crypto_user algif_skcipher algif_rng algif_hash algif_aead af_alg seqiv jitterentropy_rng drbg kpp hmac echainiv deflate cmac authencesn authenc arc4 crypto_acompress uas dwc2 fsl_mph_dr_of ehci_fsl sata_dwc_460ex gpio_button_hotplug xfs vfat fat exfat btrfs xor zstd_decompress zstd_compress zstd_common xor_neon raid6_pq lzo_decompress lzo_compress dm_mirror dm_region_hash dm_log dm_crypt dm_mod dax udc_core tpm encrypted_keys trusted
[ 2318.336769] CPU: 6 PID: 9078 Comm: kworker/u16:0 Not tainted 6.1.59 #0
[ 2318.337341] Hardware name: FriendlyElec NanoPi R6S (DT)
[ 2318.337797] Workqueue: mt76 mt7921_mac_reset_work [mt7921_common]
[ 2318.338342] pstate: 00400009 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[ 2318.338951] pc : kthread_park+0xac/0xc0
[ 2318.339289] lr : mt76u_stop_tx+0x200/0x2b0 [mt76_usb]
[ 2318.339739] sp : ffff800014d4bc80
[ 2318.340030] x29: ffff800014d4bc80 x28: 0000000000000000 x27: 00000000fffffef7
[ 2318.340656] x26: ffff000109ca9cb0 x25: ffff00010216d880 x24: 0000000000000100
[ 2318.341282] x23: ffff000109ca20b8 x22: ffff000109ca2098 x21: ffff000109ca4860
[ 2318.341907] x20: ffff00010a1ca500 x19: ffff0001002d5400 x18: 0000000000000000
[ 2318.342532] x17: 000000040044ffff x16: 004000b2b5503510 x15: 0000000000000000
[ 2318.343157] x14: ffff00010024aa00 x13: ffff8001f6171000 x12: 00000000000003c5
[ 2318.343782] x11: 071c71c71c71c71c x10: 0000000000000980 x9 : ffff800014d4bba0
[ 2318.344408] x8 : ffff00010ca841e0 x7 : 0000000000000001 x6 : ffff8000091d6028
[ 2318.345032] x5 : ffff8000091d6028 x4 : 0000000000000000 x3 : 0000000000002800
[ 2318.345657] x2 : 0000000000000000 x1 : 0000000000001fe0 x0 : 0000000000000004
[ 2318.346282] Call trace:
[ 2318.346497]  kthread_park+0xac/0xc0
[ 2318.346804]  mt76u_stop_tx+0x200/0x2b0 [mt76_usb]
[ 2318.347224]  0xffff80000175354c
[ 2318.347502]  mt7921_mac_reset_work+0x84/0x154 [mt7921_common]
[ 2318.348013]  process_one_work+0x1d4/0x330
[ 2318.348367]  worker_thread+0x70/0x430
[ 2318.348691]  kthread+0x108/0x10c
[ 2318.348976]  ret_from_fork+0x10/0x20
[ 2318.349291] ---[ end trace 0000000000000000 ]---

same problem too
how to slove

I don't have solution at the moment, and these days I am on a trip so couldn't find enough time to check.

I have the same issue with new bought ALFA AWUS036AXML. 5GHZ works fine until I do a speedtest. 6GHZ works but 10mbps connection strength...

timed out waiting for pending tx errors are still alive on kernel 6.6.xx (tested on 6.6.47). Anyone found a solution? The adapter on a x86_64 box works fine but not on ARM (raspberrypi)

I strongly believe that it's the issue with USB bus on Raspberry Pi (especially the Pi4)

For me, it happens on rpi5. That's what I am thinking and it also happens on a rpi3b with its usb 2.0 port.

FYI - There is also a discussion here.