What we learned from a 22-Day storage bug (and how we fixed it)