Use of close_fd() in cleanup on failure exits is wrong; descriptor table is a shared data structure, and as soon as you've inserted a file reference there it is entirely possible for another thread to have move it around, replace it or remove it.
Fortunately, not many places are using it that
way; two of such are in amdgpu and AFAICS they are not
hard to get rid of.
Patches are in followups; review and testing would
be very welcome - as it is, I've verified that they build,
but that's about it.
