Low: controller: avoid overflow in recheck time
Not a realistic real-world scenario, but it is possible, and this keeps static analysis happy