Ceph

The following line is problematic:

  c->tid = objecter->op_submit(objecter_op);

because the assignment might happen after the completion has been dropped. This can happen if we release the completion at the ack callback, and everything finishes before op_submit() returns. The fix should be by having op_submit() itself setting c->tid under a lock (or dropping c->tid altogether if not needed).