r6040: fix wrong assignment in r6040_free_txbufs