Ieee80211_tx_status: headroom too small (IPQ4019/QCA9886)

I've been having one of my EA8300 APs here crashing repeatedly and unexpectedly. In trying to identify a cause, I find that the logs repeatedly include (on both the one that is crashing, as well as ones with the same firmware that are not)

[...]
Jul 14 00:39:14 front err: kernel:  [217299.645952] ieee80211_tx_status: headroom too small
Jul 14 00:39:14 front err: kernel:  [217300.157929] ieee80211_tx_status: headroom too small
Jul 14 00:39:14 front err: kernel:  [217300.158059] ieee80211_tx_status: headroom too small
Jul 14 00:39:14 front err: kernel:  [217300.162078] ieee80211_tx_status: headroom too small
Jul 14 00:39:14 front err: kernel:  [217300.167077] ieee80211_tx_status: headroom too small
Jul 14 00:39:14 front err: kernel:  [217300.686612] ieee80211_tx_status: headroom too small
Jul 14 00:39:14 front err: kernel:  [217300.686672] ieee80211_tx_status: headroom too small
Jul 14 00:39:14 front err: kernel:  [217300.690709] ieee80211_tx_status: headroom too small
Jul 14 00:39:14 front err: kernel:  [217300.695666] ieee80211_tx_status: headroom too small
Jul 14 00:39:14 front err: kernel:  [217301.206597] ieee80211_tx_status: headroom too small
[...]

Linux 5.15.112 #0 SMP Sat May 20 02:50:39 2023 armv7l GNU/Linux
Built off commit cf19fd0cb5 with some local additions unrelated to the WiFi subsystem.

This seems to be related to https://elixir.bootlin.com/linux/latest/source/net/mac80211/status.c#L874

	/* send frame to monitor interfaces now */
	rtap_len = ieee80211_tx_radiotap_len(info, status);
	if (WARN_ON_ONCE(skb_headroom(skb) < rtap_len)) {
		pr_err("ieee80211_tx_status: headroom too small\n");
		dev_kfree_skb(skb);
		return;
	}

There are two monitor interfaces configured. Disabling the monitor interfaces removes the repeating error messages.

Is this something that has already been examined and resolved, here or elsewhere?