stat: do not dereference incorrect (negative or too large) backend_id