jaildesc_fill_kinfo() reads jd_prison without jd_lock. The field is
documented as protected by that lock, and prison cleanup clears it
under the lock. File descriptor export can run concurrently with jail
removal, leaving this read unsynchronized.
Hold jd_lock while obtaining the JID, as jaildesc_stat() does.