The %query-terminal-size function sent \033[18t and tried to read the response via read-char-no-hang on fd 0, which always returns nil in this SBCL environment. The response leaked into user input, displaying garbled CSI sequences. Rely on ioctl only.