tbm_surface_internal: set an error when the refcnt of a surface is less than 0