net/ice: fix null pointer dereferences for tunnels