I have discovered that there is a second way to do the crash.
both must mount a share with sharity-light.
then you can either
chown nobody /mnt/folder/on-share
ls /mnt/folder/on-share
or
chown nobody /mnt/folder/on-share
unshlight -a
the unshlight makes a unmount of the share.
and here is a different output of the trace command (perhaps it can help to
find the bug):
uvm_fault(0xd09fa3c0, 0xefffa000, 0, 3) -> d
kernel: page fault trap, code=0
Stopped at cache_zap+0x23: movl %eax,0x4(%edx)
ddb> trace
cache_zap(d5068af0,d10b8200,d50b1d4c,d04c0911,d5063698) at cache_zap+0x23
cache_purge(d5063698,d506c270,d50b1d6c,d5063698,d50a1164) at cache_purge+0x1c
nfs_reclaim(d50b1d64,103ebb0,0,d5063698,d5063698) at nfs_reclaim+0xa1
VOP_RECLAIM(d5063698,d50a1164,d50a1164,d50a1164,0) at VOP_RECLAIM+0x29
vclean(d5063698,8,d50a1164,d0412fae,0) at vclean+0x8a
vgonel(d5063698,d50a1164,d50b1e2c,d0413fdb,d50635f4) at vgonel+0x64
vflush_vnode(d5063698,d50b1e40,d50b1e2c,d10b8200,d10bf400) at vflush_vnode+0x62
vfs_mount_foreach_vnode(d10bf400,d04143c0,d50b1e40,d041417a,50) at vfs_mount_fo
reach_vnode+0x2a
vflush(d10bf400,0,0,10,0) at vflush+0x33
nfs_unmount(d10bf400,0,d50a1164,d50a1164,d10bf41c) at nfs_unmount+0x37
dounmount(d10bf400,0,d50a1164,d50635fc,d0ad7574) at dounmount+0x84
sys_unmount(d50a1164,d50b1f64,d50b1f84,d50b1fa8,d50b1fa8) at sys_unmount+0xf0
syscall() at syscall+0x2d8
--- syscall (number 0) ---
0x2:
ddb> ps
PID PPID PGRP UID S FLAGS WAIT COMMAND
*23739 5128 23739 0 7 0 unshlight
9452 18719 9452 0 3 0x80 select shlight
5128 4573 5128 0 3 0x80 wait bash
4573 4944 4573 0 3 0x80 select sshd
18719 32145 18719 0 3 0x80 wait bash
32145 4944 32145 0 3 0x80 select sshd
26351 1 19481 0 2 0 shlight
14883 11579 11579 0 3 0x80 piperd cron
3466 1 3466 0 3 0x80 ttyin getty
11579 1 11579 0 3 0x80 select cron
8702 1 8702 0 3 0x80 htplev hotplugd
18173 0 0 0 3 0x100280 nfsidl nfsio
25431 0 0 0 3 0x100280 nfsidl nfsio
657 0 0 0 3 0x100280 nfsidl nfsio
2079 0 0 0 3 0x100280 nfsidl nfsio
3057 32147 32147 70 3 0x80 select named
32147 1 32147 0 3 0x80 netio named
14859 1 14859 0 3 0x80 select nmbd
24378 15919 15919 0 3 0x80 select smbd
15919 1 15919 0 3 0x80 select smbd
9765 1 2250 585 3 0x80 kqread lighttpd
24771 1 24771 0 3 0x80 select inetd
24269 1 24269 77 3 0x80 poll dhcpd
4944 1 4944 0 3 0x80 select sshd
21317 1599 13930 83 3 0x80 poll ntpd
1599 13930 13930 83 3 0x80 poll ntpd
13930 1 13930 0 3 0x80 poll ntpd
17196 27895 27895 70 3 0x80 select named
27895 1 27895 0 3 0x80 netio named
3870 20147 20147 74 3 0x80 bpf pflogd
20147 1 20147 0 3 0x80 netio pflogd
2390 6975 6975 73 2 0x80 syslogd
6975 1 6975 0 3 0x80 netio syslogd
25917 1 25917 77 3 0x80 poll dhclient
31967 1 24786 0 3 0x80 poll dhclient
13 0 0 0 3 0x100200 aiodoned aiodoned
12 0 0 0 3 0x100200 syncer update
11 0 0 0 3 0x100200 cleaner cleaner
10 0 0 0 3 0x100200 reaper reaper
9 0 0 0 3 0x100200 pgdaemon pagedaemon
8 0 0 0 3 0x100200 bored crypto
7 0 0 0 3 0x100200 pftm pfpurge
6 0 0 0 3 0x100200 usbtsk usbtask
5 0 0 0 3 0x100200 usbatsk usbatsk
4 0 0 0 3 0x100200 bored syswq
3 0 0 0 3 0x40100200 idle0
2 0 0 0 3 0x100200 kmalloc kmthread
1 0 1 0 3 0x80 wait init
0 -1 0 0 3 0x200 scheduler swapper
3063 9452 9452 0 5 0x2000 shlight
19481 14883 19481 0 5 0x2000 sh
ddb> show registers
ds 0x10
es 0x10
fs 0x20
gs 0
edi 0xd506c270 end+0x45920cc
esi 0xd5063698 end+0x45894f4
ebp 0xd50b1d1c end+0x45d7b78
ebx 0xd5068af0 end+0x458e94c
edx 0xefffaabb
ecx 0xd09b61b8 nfs_hashlock
eax 0xd5068ca8 end+0x458eb04
eip 0xd040e903 cache_zap+0x23
cs 0x8
eflags 0x10286
esp 0xd50b1d04 end+0x45d7b60
ss 0x10
cache_zap+0x23: movl %eax,0x4(%edx)
ddb>
thanx