net/ice/base: fix mask for checking protocol header