MFC r339600:
Make sure returned value is checked and assert a valid refcount.
While at it fix a print: Unsigned types cannot be negative.

Reviewed by: kib, mjg
Approved by: re (gjb)
Differential revision: https://reviews.freebsd.org/D17616
Sponsored by: Mellanox Technologies