tty->count is not implemented properly. Scenario - cu /dev/dn3 then exited and closed with carrier still present, the init process waiting on the sidelines was awakened and I got a device busy when trying to open dn3 again.