Open file descriptors mean that JVM has open connections, which unfortunately cannot survive checkpoint dump via CRIU. Apparently, that's java specific problem, because CRIU claims that it persists open sockets and whatnot in linux.

Use org.crac.Resource to close and restore anything that opens sockets.