omadec: fix len check in nprobe() prevent out of array access