If origin server return 416 as well as Cache-Control: max-age=100, ATS will cache the bad response. ( I disable proxy.config.http.negative_caching_enabled)
Seem 416 is not "negative response", or turning off negative_caching is not prior to "Cache-Control".