io: Return EBAFD for negative file descriptor on fstat (BZ #27559)