xen-blkfront: sanitize the removal state machine