Backtrace

WARNING: CPU: 3 PID: 4474 at drivers/net/wireless/mediatek/mt7601u/dma.c:318 mt7601u_dma_enqueue_tx+0x210/0x270 [mt7601u]
Modules linked in: binfmt_misc uinput snd_seq_dummy snd_hrtimer mt7601u mac80211 libarc4 nf_conntrack_netbios_ns cfg80211 nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables intel_rapl_msr intel_rapl_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_hda_intel x86_pkg_temp_thermal intel_powerclamp qrtr snd_intel_dspcfg snd_intel_sdw_acpi coretemp snd_hda_codec snd_hda_core kvm_intel bnep snd_hwdep snd_seq snd_seq_device snd_pcm kvm snd_timer btusb btrtl btintel btbcm at24 btmtk i2c_i801 irqbypass snd bluetooth mei_me sony_laptop iTCO_wdt intel_pmc_bxt uvcvideo uvc videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common iTCO_vendor_support videodev lpc_ich mc mei rapl rfkill joydev soundcore intel_cstate i2c_smbus intel_uncore pcspkr squashfs loop zram lz4hc_compress lz4_compress i915
 rtsx_pci_sdmmc mmc_core polyval_clmulni i2c_algo_bit ghash_clmulni_intel drm_buddy sha512_ssse3 ttm sha1_ssse3 drm_display_helper r8169 rtsx_pci realtek intel_oc_wdt cec video wmi serio_raw sunrpc iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi i2c_dev fuse nfnetlink
CPU: 3 UID: 0 PID: 4474 Comm: kworker/u16:17 Tainted: G        W           6.16.3-200.fc42.x86_64 #1 PREEMPT(lazy) 
Tainted: [W]=WARN
Hardware name: Sony Corporation SVF14213SAW/VAIO, BIOS R0220DA 11/18/2013
Workqueue: events_unbound cfg80211_wiphy_work [cfg80211]
RIP: 0010:mt7601u_dma_enqueue_tx+0x210/0x270 [mt7601u]
Code: ba 01 00 00 00 89 c6 89 c5 e8 3c af 67 ea 85 c0 75 34 41 8b 47 74 85 c0 75 2a 41 01 af bc 00 00 00 41 01 6f 70 e9 63 fe ff ff <0f> 0b 48 8b 34 24 49 8d bc 24 94 06 00 00 bd e4 ff ff ff e8 38 93
RSP: 0018:ffffd092837d3c20 EFLAGS: 00010046
RAX: 0000000000000040 RBX: ffff8d4d550a4868 RCX: 0000000000000000
RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8d4d0952a694
RBP: 0000000000000005 R08: 0000000000000072 R09: 0000000000000000
R10: ffff8d4e0e4c9480 R11: 2b2e62b400004188 R12: ffff8d4d0952a000
R13: ffff8d4d9a6a38b0 R14: ffff8d4d0eb8ba90 R15: ffff8d4e0235b600
FS:  0000000000000000(0000) GS:ffff8d4e9d1df000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f9bac557000 CR3: 000000001d62c006 CR4: 00000000001726f0
Call Trace:
 <TASK>
 mt7601u_tx+0x129/0x1d0 [mt7601u]
 ieee80211_handle_wake_tx_queue+0x78/0xd0 [mac80211]
 __ieee80211_wake_txqs+0xd2/0x190 [mac80211]
 _ieee80211_wake_txqs+0x10d/0x140 [mac80211]
 ieee80211_wake_queues_by_reason+0x58/0xb0 [mac80211]
 ieee80211_scan_work+0x45e/0x610 [mac80211]
 cfg80211_wiphy_work+0x11e/0x190 [cfg80211]
 process_one_work+0x192/0x350
 worker_thread+0x25a/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xfc/0x240
 ? __pfx_kthread+0x10/0x10
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x152/0x180
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>