>> building harness (fixed): cc -DFIXED -Wall -O2 -o df3459_harness df3459_harness.c
>> built df3459_harness (rc=0)
layout: ra_pktrate@48  ra_rate_thresh@52  (thresh[-1] aliases offset 50 = ra_pktrate+2)
rssi=0 fresh node : rssadapt_rate -> rix=0  ra_rix=0  ni_txrate=0x02 (bogus: rs_nrates byte 8)
  -> rs_rates[-1] read returned the rs_nrates byte (0): in-struct OOB read confirmed
  -> iwm_setrates KASSERT(rix >= 0 && rix < nrates): ok  (INVARIANTS kernel would PANIC here)
lower_rate with ra_rix=-1: u_int rix = 0x00000000 -> access at chunk+0x34 (wild +0 GiB)
  -> no fault observed
after tx-complete failure: ra_pktrate = 0x11223344 (was 0x11223344)  canaries intact
RESULT: no negative-index effect observed (fix active)
rc=0