libceph: fix two unsafe bare decodes in decode_lockers()

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-68082 · Microsoft / collected KEV context

cve-program · CVE-2026-68082

• https://git.kernel.org/stable/c/c8ade01170a27d8ede0d761c255268af81e417f8
• https://git.kernel.org/stable/c/001835c599899ef1bd3506a815110a6374451554
• https://git.kernel.org/stable/c/7c422364acd93d7da1dfc27d6b54635a269653a1
• https://git.kernel.org/stable/c/02430f6f729b297e803d0605871f0a670b4eafd6
• https://git.kernel.org/stable/c/57ba829804fe6d34bbac3b826c4b15c1caa54862
• https://git.kernel.org/stable/c/89df5d71f83f8e2781286798fd8ae5e42cf5f1a7
• https://git.kernel.org/stable/c/a54be593d0b749161b08a1e56189b2cb9114267a
• https://git.kernel.org/stable/c/a109a556115271ca7896dcda7b4b7e45e156c227

No related operational record is retained in the current change model.