tty_open can return to userspace holding tty_mutex