ceph: avoid possible null dereference