MFC r263460:
Take filedesc lock only for reading when allocating new fdtable.

Code populating the table does this already.
MFC r263530:
Mark the following sysctls as MPSAFE:
kern.file
kern.proc.filedesc
kern.proc.ofiledesc