3 ms·

If you've formally proved that correct, then either it can't overflow or there's a massive bug in the prover.