SCENARIO guard: chan=15, table at page end, next page PROT_NONE
SCENARIO guard: SIGSEGV si_addr=0x800474000 -- table walk left mt7601_rf_chan[14] and the mapped page (unbounded linear search)
SCENARIO guard: child_exit=91
SCENARIO sentinel: child_exit=0
SCENARIO walk-real: VERBATIM mt7601_set_chan(chan=15) on the REAL static table in this process image (.data-adjacent bytes are whatever the linker placed -- kernel analogue: adjacent .rodata)
SCENARIO walk-real: SIGSEGV si_addr=0x403000 -- table walk left mt7601_rf_chan[14] and the mapped page (unbounded linear search)
SCENARIO walk-real: child_exit=91
SCENARIO control: child_exit=0
0