The overflow happens before the conversion to unsigned.