CPU1: hostapd Not tainted

After running for more than 10 days, CPU1 tainted as follows:

[172845.220313] ------------[ cut here ]------------
[172845.229706] WARNING: CPU: 1 PID: 1562 at backports-6.1.24/net/mac80211/driver-ops.h:611 __ieee80211_flush_queues+0x184/0x194 [mac80211]
[172845.254406] phy0-ap0.sta1: Failed check-sdata-in-driver check, flags: 0x1
[172845.268131] Modules linked in: pppoe ppp_async wireguard pppox ppp_mppe ppp_generic nft_redir nft_nat nft_masq nft_flow_offload nft_fib_inet nft_ct nft_chain_nat nf_nat_tftp nf_nat_snmp_basic nf_nat_sip nf_nat_pptp nf_nat_irc nf_nat_h323 nf_nat_ftp nf_nat_amanda nf_nat nf_flow_table_ipv6 nf_flow_table_ipv4 nf_flow_table_inet nf_flow_table nf_conntrack_tftp nf_conntrack_snmp nf_conntrack_sip nf_conntrack_pptp nf_conntrack_netlink nf_conntrack_irc nf_conntrack_h323 nf_conntrack_ftp nf_conntrack_broadcast nf_conntrack_amanda nf_conntrack mt76x2e mt76x2_common mt76x02_lib mt7603e mt76 mac80211 libchacha20poly1305 ipt_REJECT cfg80211 xt_time xt_tcpudp xt_multiport xt_mark xt_mac xt_limit xt_comment xt_TCPMSS xt_LOG usblp ums_usbat ums_sddr55 ums_sddr09 ums_karma ums_jumpshot ums_isd200 ums_freecom ums_datafab ums_cypress ums_alauda ts_kmp ts_fsm ts_bm slhc poly1305_mips nft_reject_ipv6 nft_reject_ipv4 nft_reject_inet nft_reject nft_quota nft_objref nft_numgen nft_log nft_limit nft_hash
[172845.268573]  nft_fib_ipv6 nft_fib_ipv4 nft_fib nft_counter nf_tables nf_reject_ipv6 nf_reject_ipv4 nf_log_syslog nf_defrag_ipv6 nf_defrag_ipv4 macvlan libcurve25519_generic libcrc32c iptable_mangle iptable_filter ip6_tables ip_tables crc_ccitt compat chacha_mips asn1_decoder xt_set x_tables ip_set_list_set ip_set_hash_netportnet ip_set_hash_netport ip_set_hash_netnet ip_set_hash_netiface ip_set_hash_net ip_set_hash_mac ip_set_hash_ipportnet ip_set_hash_ipportip ip_set_hash_ipport ip_set_hash_ipmark ip_set_hash_ipmac ip_set_hash_ip ip_set_bitmap_port ip_set_bitmap_ipmac ip_set_bitmap_ip ip_set nfnetlink msdos ip6_udp_tunnel udp_tunnel tun ntfs autofs4 nls_utf8 nls_iso8859_1 nls_cp936 nls_cp437 crypto_user algif_skcipher algif_rng algif_hash algif_aead af_alg sha512_generic sha256_generic libsha256 sha1_generic seqiv jitterentropy_rng drbg hmac ecb cmac arc4 uas usb_storage leds_gpio xhci_plat_hcd xhci_pci xhci_mtk_hcd xhci_hcd uhci_hcd ohci_platform ohci_hcd fsl_mph_dr_of ehci_platform
[172845.442452]  ehci_fsl sd_mod scsi_mod scsi_common ehci_hcd gpio_button_hotplug vfat fat ext4 mbcache jbd2 exfat usbcore nls_base usb_common crc32c_generic
[172845.644142] CPU: 1 PID: 1562 Comm: hostapd Not tainted 5.15.112 #0
[172845.656634] Stack : 83bbfee8 80085a94 00000000 00000004 00000000 00000000 83bbfa24 80a40000
[172845.673468]         80880000 807a7140 83ae90b8 8087ce83 00000000 00000001 83bbf9d0 81452640
[172845.690293]         00000000 00000000 807a7140 83bbf870 ffffefff 00000000 ffffffea 00000000
[172845.707117]         83bbf87c 00000171 80882b60 ffffffff 807a7140 00000001 00000000 8384910c
[172845.723942]         00000009 80a782a0 00000028 81427464 00000000 80427330 00000004 80a40004
[172845.740774]         ...
[172845.745815] Call Trace:
[172845.750838] [<8000812c>] show_stack+0x28/0xf0
[172845.759711] [<8039c068>] dump_stack_lvl+0x60/0x80
[172845.769256] [<8002f6fc>] __warn+0x9c/0x124
[172845.777600] [<8002f810>] warn_slowpath_fmt+0x8c/0xac
[172845.787674] [<8384910c>] __ieee80211_flush_queues+0x184/0x194 [mac80211]
[172845.801393] [<8380b55c>] sta_set_sinfo+0xf88/0x10a0 [mac80211]
[172845.813341] 
[172845.816658] ---[ end trace bdce9726a99d2844 ]---
[176981.352022] br-lan: port 7(phy0-ap0.sta1) entered disabled state
[176981.420234] device phy0-ap0.sta1 left promiscuous mode
[176981.430715] br-lan: port 7(phy0-ap0.sta1) entered disabled state
[177029.653972] br-lan: port 7(phy0-ap0.sta1) entered blocking state
[177029.666178] br-lan: port 7(phy0-ap0.sta1) entered disabled state
[177029.679008] device phy0-ap0.sta1 entered promiscuous mode
[177029.690331] br-lan: port 7(phy0-ap0.sta1) entered blocking state
[177029.702556] br-lan: port 7(phy0-ap0.sta1) entered forwarding state
[208398.434498] mt76x2e 0000:02:00.0: MAC error detected
[781775.589691] br-lan: port 7(phy0-ap0.sta1) entered disabled state
[781775.697498] device phy0-ap0.sta1 left promiscuous mode
[781775.708010] br-lan: port 7(phy0-ap0.sta1) entered disabled state
[781823.739300] br-lan: port 7(phy0-ap0.sta1) entered blocking state
[781823.751585] br-lan: port 7(phy0-ap0.sta1) entered disabled state
[781823.764260] device phy0-ap0.sta1 entered promiscuous mode
[781823.775530] br-lan: port 7(phy0-ap0.sta1) entered blocking state
[781823.787737] br-lan: port 7(phy0-ap0.sta1) entered forwarding state
[806428.104717] pppoe-wan: renamed from ppp0
root@OpenWrt:~# 

The router is:

root@OpenWrt:~# uname -a
Linux OpenWrt 5.15.112 #0 SMP Sat May 20 13:51:39 2023 mips GNU/Linux
root@OpenWrt:~# opkg list-installed | grep mt76
kmod-mt76-core - 5.15.112+2023-05-13-969b7b5e-1
kmod-mt7603 - 5.15.112+2023-05-13-969b7b5e-1
kmod-mt76x02-common - 5.15.112+2023-05-13-969b7b5e-1
kmod-mt76x2 - 5.15.112+2023-05-13-969b7b5e-1
kmod-mt76x2-common - 5.15.112+2023-05-13-969b7b5e-1
root@OpenWrt:~# opkg print-architecture
arch all 1
arch noarch 1
arch mipsel_24kc 10

root@OpenWrt:~# cat /etc/openwrt_release 
DISTRIB_ID='OpenWrt'
DISTRIB_RELEASE='SNAPSHOT'
DISTRIB_REVISION='r23586-e4ce215367'
DISTRIB_TARGET='ramips/mt7621'
DISTRIB_ARCH='mipsel_24kc'
DISTRIB_DESCRIPTION='OpenWrt SNAPSHOT r23586-e4ce215367'
DISTRIB_TAINTS='no-all'

Start with the warning at backports-6.1.24/net/mac80211/driver-ops.h:611 and the __ieee80211_flush_queues and sta_set_sinfo call trace. Compare the reported mt76, mac80211, kernel, and hostapd versions, then determine whether the warning is reproducible and identify the driver or mac80211 change needed to eliminate it.