tipc: clear 'next'-pointer of message fragments before reassembly