brl_traverse_fn() walked the record itself instead of going through brl_parse_data(), which is broken soince the Persistent Handle patchset put a four byte version prefix in front of the lock array. Have patch, need bugnumber...
This bug was referenced in samba master: 8070be375433503407e1bc07bdd2b89e36a9a66f
Created attachment 19235 [details] Patch for 4.25 cherry-picked from master
This bug was referenced in samba v4-25-test: db2936c7c054836739b6a5dba92b256070c1dae4
This bug was referenced in samba v4-25-stable (Release samba-4.25.0): db2936c7c054836739b6a5dba92b256070c1dae4