if current msg is a sub-msg, the ``msg->frag_owner`` may be ``free`` and reset by ``_msg_get``, this is not correct, especially for ``req_error``