Could you please run `zypper ps -d zypper.ps.log` if this happens again and attach the the created logfile (zypper.ps.log). It may be lsof fools us about the command name.