mbrtowc: do not leave mbstate_t in permanent-fail state after EILSEQ