NFS4_OPEN_STID, stpp, nn);
        if (status)
                return status;
+       /* FIXME: move into nfs4_preprocess_seqid_op */
+       atomic_inc(&(*stpp)->st_stid.sc_count);
        oo = openowner((*stpp)->st_stateowner);
        if (!(oo->oo_flags & NFS4_OO_CONFIRMED))
                return nfserr_bad_stateid;
        if (!test_access(od->od_share_access, stp)) {
                dprintk("NFSD: access not a subset of current bitmap: 0x%hhx, input access=%08x\n",
                        stp->st_access_bmap, od->od_share_access);
-               goto out;
+               goto put_stateid;
        }
        if (!test_deny(od->od_share_deny, stp)) {
                dprintk("NFSD: deny not a subset of current bitmap: 0x%hhx, input deny=%08x\n",
                        stp->st_deny_bmap, od->od_share_deny);
-               goto out;
+               goto put_stateid;
        }
        nfs4_stateid_downgrade(stp, od->od_share_access);
 
        update_stateid(&stp->st_stid.sc_stateid);
        memcpy(&od->od_stateid, &stp->st_stid.sc_stateid, sizeof(stateid_t));
        status = nfs_ok;
+put_stateid:
+       nfs4_put_stid(&stp->st_stid);
 out:
        nfsd4_bump_seqid(cstate, status);
        if (!cstate->replay_owner)
        struct nfs4_openowner *open_sop = NULL;
        struct nfs4_lockowner *lock_sop = NULL;
        struct nfs4_ol_stateid *lock_stp = NULL;
+       struct nfs4_ol_stateid *open_stp = NULL;
        struct nfs4_file *fp;
        struct file *filp = NULL;
        struct file_lock *file_lock = NULL;
        nfs4_lock_state();
 
        if (lock->lk_is_new) {
-               struct nfs4_ol_stateid *open_stp = NULL;
-
                if (nfsd4_has_session(cstate))
                        /* See rfc 5661 18.10.3: given clientid is ignored: */
                        memcpy(&lock->v.new.clientid,
                fput(filp);
        if (lock_stp)
                nfs4_put_stid(&lock_stp->st_stid);
+       if (open_stp)
+               nfs4_put_stid(&open_stp->st_stid);
        if (status && new_state)
                release_lock_stateid(lock_stp);
        nfsd4_bump_seqid(cstate, status);