fh_put(resfh);
                kfree(resfh);
        }
-       nfsd4_cleanup_open_state(open, status);
-       if (open->op_openowner && !nfsd4_has_session(cstate))
-               cstate->replay_owner = &open->op_openowner->oo_owner;
+       nfsd4_cleanup_open_state(cstate, open, status);
        nfsd4_bump_seqid(cstate, status);
-       if (!cstate->replay_owner)
-               nfs4_unlock_state();
+       nfs4_unlock_state();
        return status;
 }
 
                        args->ops, args->opcnt, resp->opcnt, op->opnum,
                        be32_to_cpu(status));
 
-               if (cstate->replay_owner) {
-                       nfs4_unlock_state();
-                       cstate->replay_owner = NULL;
-               }
+               nfsd4_cstate_clear_replay(cstate);
                /* XXX Ugh, we need to get rid of this kind of special case: */
                if (op->opnum == OP_READ && op->u.read.rd_filp)
                        fput(op->u.read.rd_filp);
 
                return;
 
        if (!seqid_mutating_err(ntohl(nfserr))) {
-               cstate->replay_owner = NULL;
+               nfsd4_cstate_clear_replay(cstate);
                return;
        }
        if (!so)
        rp->rp_status = nfserr_serverfault;
        rp->rp_buflen = 0;
        rp->rp_buf = rp->rp_ibuf;
+       mutex_init(&rp->rp_mutex);
+}
+
+static void nfsd4_cstate_assign_replay(struct nfsd4_compound_state *cstate,
+               struct nfs4_stateowner *so)
+{
+       if (!nfsd4_has_session(cstate)) {
+               mutex_lock(&so->so_replay.rp_mutex);
+               cstate->replay_owner = so;
+               atomic_inc(&so->so_count);
+       }
+}
+
+void nfsd4_cstate_clear_replay(struct nfsd4_compound_state *cstate)
+{
+       struct nfs4_stateowner *so = cstate->replay_owner;
+
+       if (so != NULL) {
+               cstate->replay_owner = NULL;
+               mutex_unlock(&so->so_replay.rp_mutex);
+               nfs4_put_stateowner(so);
+       }
 }
 
 static inline void *alloc_stateowner(struct kmem_cache *slab, struct xdr_netobj *owner, struct nfs4_client *clp)
        return status;
 }
 
-void nfsd4_cleanup_open_state(struct nfsd4_open *open, __be32 status)
+void nfsd4_cleanup_open_state(struct nfsd4_compound_state *cstate,
+                             struct nfsd4_open *open, __be32 status)
 {
        if (open->op_openowner) {
                struct nfs4_openowner *oo = open->op_openowner;
                        } else
                                oo->oo_flags &= ~NFS4_OO_NEW;
                }
+               if (open->op_openowner)
+                       nfsd4_cstate_assign_replay(cstate, &oo->oo_owner);
        }
        if (open->op_file)
                nfsd4_free_file(open->op_file);
        if (status)
                return status;
        stp = openlockstateid(s);
-       if (!nfsd4_has_session(cstate))
-               cstate->replay_owner = stp->st_stateowner;
+       nfsd4_cstate_assign_replay(cstate, stp->st_stateowner);
 
        status = nfs4_seqid_op_checks(cstate, stateid, seqid, stp);
        if (!status)
        nfs4_put_stid(&stp->st_stid);
 out:
        nfsd4_bump_seqid(cstate, status);
-       if (!cstate->replay_owner)
-               nfs4_unlock_state();
+       nfs4_unlock_state();
        return status;
 }
 
        nfs4_put_stid(&stp->st_stid);
 out:
        nfsd4_bump_seqid(cstate, status);
-       if (!cstate->replay_owner)
-               nfs4_unlock_state();
+       nfs4_unlock_state();
        return status;
 }
 
        /* put reference from nfs4_preprocess_seqid_op */
        nfs4_put_stid(&stp->st_stid);
 out:
-       if (!cstate->replay_owner)
-               nfs4_unlock_state();
+       nfs4_unlock_state();
        return status;
 }
 
        if (status && new_state)
                release_lock_stateid(lock_stp);
        nfsd4_bump_seqid(cstate, status);
-       if (!cstate->replay_owner)
-               nfs4_unlock_state();
+       nfs4_unlock_state();
        if (file_lock)
                locks_free_lock(file_lock);
        if (conflock)
        nfs4_put_stid(&stp->st_stid);
 out:
        nfsd4_bump_seqid(cstate, status);
-       if (!cstate->replay_owner)
-               nfs4_unlock_state();
+       nfs4_unlock_state();
        if (file_lock)
                locks_free_lock(file_lock);
        return status;
 
                struct nfsd4_open *open, struct nfsd_net *nn);
 extern __be32 nfsd4_process_open2(struct svc_rqst *rqstp,
                struct svc_fh *current_fh, struct nfsd4_open *open);
-extern void nfsd4_cleanup_open_state(struct nfsd4_open *open, __be32 status);
+extern void nfsd4_cstate_clear_replay(struct nfsd4_compound_state *cstate);
+extern void nfsd4_cleanup_open_state(struct nfsd4_compound_state *cstate,
+               struct nfsd4_open *open, __be32 status);
 extern __be32 nfsd4_open_confirm(struct svc_rqst *rqstp,
                struct nfsd4_compound_state *, struct nfsd4_open_confirm *oc);
 extern __be32 nfsd4_close(struct svc_rqst *rqstp,
 extern __be32 nfsd4_free_stateid(struct svc_rqst *rqstp,
                struct nfsd4_compound_state *, struct nfsd4_free_stateid *free_stateid);
 extern void nfsd4_bump_seqid(struct nfsd4_compound_state *, __be32 nfserr);
+
 #endif
 
 /*