upcall: Avoid divide-by-zero calculating flow limit