run:

lsof|grep delete

can find some process open fd, but system dis that it had to delete:

mingetty 2031 root txt REG 8,2 15256 49021039 /sbin/mingetty (deleted)

I look the /proce filesystem:

ls -l /proc/[pid]

lrwxrwxrwx 1 root root 0 9?  17 16:12 exe -> /sbin/mingetty (deleted)

but actually, the executable(/sbin/mingetty) is normal at /sbin/mingetty path.

and some soket like this situation:

ls -l /proc/[pid]/fd

82 -> socket:[23716953]

but, use the commands: netstat -ae|grep [socket id] can find it.

why the OS display this infomation??