Since device can pass multiple frames in a single payload temporary Rx buffer must hold all of them; with this patch driver can concatenate a single frame from multiple payloads. The Rx buffer size now is configurable via tunable (dev.rtwn.%d.rx_buf_size).
(Also, this should resolve https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=218527).