I was able to repro this issue by pegging the system's maximum FD count using a small C program. However, I haven't been able to reproduce it solely using osquery yet.