MFC r345466:

Fix more signed unsigned issues. This time on the send path.
This is joint work with rrs@ and was found by running syzkaller.