i'm not sure, but i'm guessing that it happens here: audio.c:2491: error = fd_clone(fp, fd, flags, &audio_fileops, af); audio.c:3541: error = fd_clone(fp, fd, flags, &audio_fileops, af); audio.c:8167: error = fd_clone(fp, fd, flags, &audio_fileops, af);
with kern_descrip.c:1882:fd_clone(file_t *fp, unsigned fd, int flag, const struct fileops *fops, kern_descrip.c:1883: void *data) [ ... ] kern_descrip.c:1895: fp->f_data = data; .mrg.