When inherting permissions on the created stream, we call into the VFS to fetch the streams security descriptor via inherit_access_posix_acl() -> copy_access_posix_acl() -> SMB_VFS_SYS_ACL_GET_FD() passing the stream fsp which triggers the assert SMB_ASSERT(!fsp_is_alternate_stream(fsp)) in vfswrap_sys_acl_get_fd() in vfs_default. Working on a fix...
This bug was referenced in samba master: 09835608307ff2580f1aada84d44feddae17c80f ecb8a99a2c7ba36f9adc50ef13cd8465a0c49b19
Created attachment 18436 [details] Patch for 4.20 and 4.21 cherry-picked from master
Pushed to autobuild-v4-{21,20}-test.
This bug was referenced in samba v4-20-test: a60419838bacd6e9bb5f2184b2aa6b26ab342c0b 9559c00d063bf63461a17b3c48804a08cfea5f95
This bug was referenced in samba v4-21-test: 882eadc385574bd06bf06bd8a9b50614b02a244a 505f48fff985f40ea31d9f75ee19ac6ae5de1632
Closing out bug report. Thanks!