must have vnode locked when calling VOP_ACCESS