We've been seeing this lock leak occasionally in stress tests,
presumably due to an application bug. For some reason, it's only
been happening in our "BSD refresh" branch, which brings our
OS up-to-date with respect to FreeBSD.
I added an assertion to the error case for the vm_map_lookup() call
to confirm the scenario I described above.