http://mradomski.wordpress.com/2007/01/08/finding-an-unlinked-open-file-and-other-lsof-uses/ There are no open files. The filesystem was unmounted, verified (fsck) , mounted again - the behavior remains.