ra: assert against unsigned underflow in q_total