In a review of #2671 @alan-baker pointed out that the sign of an index in an access chain rarely matters, and that it might be worth fuzzing this sign.