Hmm... I'm not sure when a process's open file descriptors get closed. I would have thought it was when the process died, but I'm not expert there. Maybe it's possible that the parent process (in this case the kernel itself) actually maintains the fd's for the khttpd/kftpd threads, and only releases them when it gets around to cleaning up after them.