net/ice/base: fix overrun