mm: remove_memory(): fix end_pfn setting