b43: fix invalid memory access in b43_ssb_remove()