tty: Fix GPF in flush_to_ldisc(), part 2