I was very tangentially involved with a use-after-close IO descriptor fault recently,  and I came to realize that descriptor indexes are typically allocated by the smallest available index