mt76-tx phy1 Tainted

My mt7621 router ran into ph1 tained status after a long period of download data.
Following is the log:

#dmesg
...
[106420.982549] ------------[ cut here ]------------
[106420.987432] WARNING: CPU: 1 PID: 996 at backports-5.10.42-1/net/mac80211/airtime.c:457 ieee80211_ocb_leave+0x564/0x644 [mac80211]
[106420.999460] Modules linked in: pppoe ppp_async wireguard pppox ppp_generic mt76x2e mt76x2_common mt76x02_lib mt7603e mt76 mac80211 libchacha20poly1305 libblake2s ipt_REJECT cfg80211 xt_time xt_tcpudp xt_tcpmss xt_statistic xt_state xt_socket xt_recent xt_nat xt_multiport xt_mark xt_mac xt_limit xt_length xt_hl xt_helper xt_ecn xt_dscp xt_conntrack xt_connmark xt_connlimit xt_connbytes xt_comment xt_TPROXY xt_TCPMSS xt_REDIRECT xt_MASQUERADE xt_LOG xt_HL xt_FLOWOFFLOAD xt_DSCP xt_CT xt_CLASSIFY ums_usbat ums_sddr55 ums_sddr09 ums_karma ums_jumpshot ums_isd200 ums_freecom ums_datafab ums_cypress ums_alauda slhc poly1305_mips nf_tproxy_ipv6 nf_tproxy_ipv4 nf_socket_ipv6 nf_socket_ipv4 nf_reject_ipv4 nf_log_ipv4 nf_flow_table_hw nf_flow_table nf_conntrack_netlink nf_conncount macvlan libcurve25519_generic libblake2s_generic iptable_raw iptable_nat iptable_mangle iptable_filter ipt_ECN ip_tables crc_ccitt compat chacha_mips ledtrig_usbport xt_set ip_set_list_set ip_set_hash_netportnet
[106420.999645]  ip_set_hash_netport ip_set_hash_netnet ip_set_hash_netiface ip_set_hash_net ip_set_hash_mac ip_set_hash_ipportnet ip_set_hash_ipportip ip_set_hash_ipport ip_set_hash_ipmark ip_set_hash_ip ip_set_bitmap_port ip_set_bitmap_ipmac ip_set_bitmap_ip ip_set nfnetlink ip6table_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip6t_NPT nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables ip6t_REJECT x_tables nf_reject_ipv6 msdos ip6_udp_tunnel udp_tunnel tun vfat fat ntfs autofs4 nls_utf8 nls_iso8859_1 nls_cp437 sha256_generic libsha256 seqiv jitterentropy_rng drbg hmac ghash_generic gf128mul gcm ctr cmac ccm uas usb_storage leds_gpio xhci_plat_hcd xhci_pci xhci_mtk xhci_hcd sd_mod scsi_mod gpio_button_hotplug ext4 mbcache jbd2 exfat(C) usbcore nls_base usb_common crc32c_generic
[106421.157244] CPU: 1 PID: 996 Comm: mt76-tx phy1 Tainted: G         C        5.4.124 #0
[106421.165137] Stack : 00000000 8007b218 806e0000 806e53cc 80750000 806e5394 806e42fc 8dcedc94
[106421.173561]         80880000 8fdf03a4 8072ed63 80676d68 00000001 00000001 8dcedc38 3d2e2d7b
[106421.181988]         00000000 00000000 808c0000 00000000 30000000 00000193 00000018 20202047
[106421.190401]         00000000 000014ae 00000000 20432020 00000000 80750000 00000000 8eb57cb0
[106421.198816]         00000009 00000014 00000004 00000002 00000008 80374fc4 00000004 80880004
[106421.207233]         ...
[106421.209758] Call Trace:
[106421.212316] [<8000b64c>] show_stack+0x30/0x100
[106421.216843] [<805b96d0>] dump_stack+0xa4/0xdc
[106421.221286] [<8002c18c>] __warn+0xc0/0x10c
[106421.225453] [<8002c234>] warn_slowpath_fmt+0x5c/0xac
[106421.230658] [<8eb57cb0>] ieee80211_ocb_leave+0x564/0x644 [mac80211]
[106421.237152] ---[ end trace 9f60eee69308e792 ]---
[109117.870999] mt7530 mdio-bus:1f lan3: Link is Down
[109117.876626] br-lan: port 3(lan3) entered disabled state
[109132.430215] mt7530 mdio-bus:1f lan3: Link is Up - 100Mbps/Full - flow control rx/tx
[109132.438002] br-lan: port 3(lan3) entered blocking state
[109132.443352] br-lan: port 3(lan3) entered forwarding state
[109133.469824] mt7530 mdio-bus:1f lan3: Link is Down
[109133.474852] br-lan: port 3(lan3) entered disabled state
[109143.869967] mt7530 mdio-bus:1f lan3: Link is Up - 10Mbps/Full - flow control rx/tx
[109143.877692] br-lan: port 3(lan3) entered blocking state
[109143.883034] br-lan: port 3(lan3) entered forwarding state
[109144.909844] mt7530 mdio-bus:1f lan3: Link is Down
[109144.914896] br-lan: port 3(lan3) entered disabled state
[109151.150015] mt7530 mdio-bus:1f lan3: Link is Up - 1Gbps/Full - flow control rx/tx
[109151.157636] br-lan: port 3(lan3) entered blocking state
[109151.162996] br-lan: port 3(lan3) entered forwarding state
......

And hardware and software:

root@OpenWrt:~# uname -a
Linux OpenWrt 5.4.124 #0 SMP Wed Jun 16 12:14:33 2021 mips GNU/Linux
root@OpenWrt:~# opkg list-installed | grep mt76
kmod-mt76-core - 5.4.124+2021-06-06-22b69033-4
kmod-mt7603 - 5.4.124+2021-06-06-22b69033-4
kmod-mt76x02-common - 5.4.124+2021-06-06-22b69033-4
kmod-mt76x2 - 5.4.124+2021-06-06-22b69033-4
kmod-mt76x2-common - 5.4.124+2021-06-06-22b69033-4
root@OpenWrt:~# opkg print-architecture
arch all 1
arch noarch 1
arch mipsel_24kc 10

Router is newifi-d2 with openwrt master branch.

Start with the warning at backports-5.10.42-1/net/mac80211/airtime.c:457 and the ieee80211_ocb_leave call trace, then review the mt76 transmit path associated with the mt76-tx phy1 thread. Reproduce the warning during sustained download on the newifi-d2 with the reported OpenWrt and mt76 versions. Done means identifying the trigger and providing a verified fix or a confirmed upstream resolution.