Are you using a virtual file system?

I had one user who saw this behavior on a network file system and it was reproducible using find/grep in a terminal.

Hmm, yes. Its actually a centos virtual machine, which I mount via afp.

I will try to reproduce from shell (I grep lots from cmdline but Im normally ssh'd into the vm rather than grepping over the afp mount).