rx: update_nextCid overflow handling is broken