Original IO_STACK_LOCATION
kd> dt _IO_STACK_LOCATION 81e1cbb0 /r

ntdll!_IO_STACK_LOCATION

   +0x000 MajorFunction    : 0x6 ”

   +0x001 MinorFunction    : 0 ”

   +0x002 Flags            : 0xfc ”

   +0x003 Control          : 0x1 ”

   +0x004 Parameters       : __unnamed

      +0x000 Create           : __unnamed

         +0x000 SecurityContext  : (null)

         +0x004 Options          : 0x884

         +0x008 FileAttributes   : 0

         +0x00a ShareAccess      : 0 <-- Attention

Modified IO_STACK_LOCATION
some filter driver modified  IrpSp->Parameters.Create.ShareAccess passing down IRP to Ntfs.sys
kd> dt _IO_STACK_LOCATION 0x81e1cd64 /r
ntdll!_IO_STACK_LOCATION

   +0x000 MajorFunction    : 0 ”

   +0x001 MinorFunction    : 0 ”

   +0x002 Flags            : 0 ”

   +0x003 Control          : 0 ”

   +0x004 Parameters       : __unnamed

      +0x000 Create           : __unnamed

         +0x000 SecurityContext  : 0xf5244a88 _IO_SECURITY_CONTEXT

         +0x004 Options          : 0x5000060

         +0x008 FileAttributes   : 0x80

         +0x00a ShareAccess      : 7 //FILE_SHARE_READ | FILE_SHARE_WRITE | FILE_SHARE_DELETE

kd> t

nt!IofCallDriver:

8081d55e 8bff            mov     edi,edi

kd> pc

nt!IofCallDriver+0x41:

8081d59f ff548638        call    dword ptr [esi+eax*4+38h]

kd> t

fltmgr!FltpCreate:

f724e374 8bff            mov     edi,edi

kd> pc

fltmgr!FltpCreate+0xde:

f724e452 ff15045124f7    call    dword ptr [fltmgr!_imp_IofCallDriver (f7245104)]

kd> t

nt!IofCallDriver:

8081d55e 8bff            mov     edi,edi

kd> pc

nt!IofCallDriver+0x41:

8081d59f ff548638        call    dword ptr [esi+eax*4+38h]

kd> t

Ntfs!NtfsFsdCreate:

f71c8dc9 68d4000000      push    0D4h

kd> pc

Ntfs!NtfsFsdCreate+0xa:

f71c8dd3 e898e0fbff      call    Ntfs!_SEH_prolog (f7186e70)

kd> pc

Ntfs!NtfsFsdCreate+0x73:

f71c8e06 ff150cb119f7    call    dword ptr [Ntfs!imp_KeEnterCriticalRegion (f719b10c)]

kd> pc

Ntfs!NtfsFsdCreate+0x89:

f71c8e1c e8c6e3fbff      call    Ntfs!NtfsInitializeTopLevelIrp (f71871e7)

kd> pc

Ntfs!NtfsFsdCreate+0xab:

f71c8e42 ff1580b119f7    call    dword ptr [Ntfs!imp_IoIsOperationSynchronous (f719b180)]

kd> pc

Ntfs!NtfsFsdCreate+0xcc:

f71c8e5e e8ace0fbff      call    Ntfs!NtfsInitializeIrpContext (f7186f0f)

kd> pc

Ntfs!NtfsFsdCreate+0xeb:

f71c8e7d ff1508b119f7    call    dword ptr [Ntfs!imp_IoSetTopLevelIrp (f719b108)]

kd> pc

Ntfs!NtfsFsdCreate+0x106:

f71c8e98 ff157cb119f7    call    dword ptr [Ntfs!imp_KeInitializeEvent (f719b17c)]

kd> pc

Ntfs!NtfsFsdCreate+0x15a:

f71c8ed1 ff1564b019f7    call    dword ptr [Ntfs!imp_IoGetStackLimits (f719b064)]

kd> pc

Ntfs!NtfsFsdCreate+0x178:

f71c8ef3 e839f3ffff      call    Ntfs!NtfsCommonCreate (f71c8231)

kd> t

Ntfs!NtfsCommonCreate:

f71c8231 6804010000      push    104h

kd> pc

Ntfs!NtfsCommonCreate+0xa:

f71c823b e830ecfbff      call    Ntfs!_SEH_prolog (f7186e70)

kd> pc

Ntfs!NtfsCommonCreate+0x145:

f71c832e e827fdffff      call    Ntfs!NtfsAcquireSharedVcb (f71c805a)

kd> t

Ntfs!NtfsAcquireSharedVcb:

f71c805a 8bff            mov     edi,edi

kd> pc

Ntfs!NtfsAcquireSharedVcb+0x1d:

f71c8077 ff1590b419f7    call    dword ptr [Ntfs!imp_ExAcquireResourceSharedLite (f719b490)]

kd> pc

Ntfs!NtfsCommonCreate+0x2c5:

f71c8410 e871daffff      call    Ntfs!NtfsPingVolume (f71c5e86)

kd> pc

Ntfs!NtfsCommonCreate+0x752:

f71c8594 e8a301fcff      call    Ntfs!NtfsAcquireSharedFcb (f718873c)

kd> t

Ntfs!NtfsAcquireSharedFcb:

f718873c 8bff            mov     edi,edi

kd> !teb

TEB at 7ffde000

    ExceptionList:        0012f570

    StackBase:            00130000

    StackLimit:           0012c000

    SubSystemTib:         00000000

    FiberData:            00001e00

    ArbitraryUserPointer: 00000000

    Self:                 7ffde000

    EnvironmentPointer:   00000000

    ClientId:             00000efc . 00000d9c

    RpcHandle:            00000000

    Tls Storage:          00000000

    PEB Address:          7ffdf000

    LastErrorValue:       0

    LastStatusValue:      c0000023

    Count Owned Locks:    0

    HardErrorMode:        0

kd> pc

Ntfs!NtfsAcquireSharedFcb+0x20:

f718875c e822f4ffff      call    Ntfs!NtfsAcquireResourceShared (f7187b83)

kd> pc

Ntfs!NtfsCommonCreate+0x9a2:

f71d0f7d ff1574b419f7    call    dword ptr [Ntfs!imp_ExAllocatePoolWithTag (f719b474)]

kd> pc

Ntfs!NtfsCommonCreate+0xa14:

f71c871b e8c2040000      call    Ntfs!NtfsUpcaseName (f71c8be2)

kd> pc

Ntfs!NtfsCommonCreate+0xafa:

f71c87c9 e885d3ffff      call    Ntfs!NtfsFindPrefixHashEntry (f71c5b53)

kd> pc

Ntfs!NtfsCommonCreate+0xdf9:

f71c88b4 e83b940000      call    Ntfs!NtfsOpenExistingPrefixFcb (f71d1cf4)

kd> t

Ntfs!NtfsOpenExistingPrefixFcb:

f71d1cf4 6888000000      push    88h

kd> g @$ra

Ntfs!NtfsCommonCreate+0x127e:

f71c88b9 8945e4          mov     dword ptr [ebp-1Ch],eax 
success to open existing file without sharing violation

kd> r

eax=00000000 ebx=f52445a4 ecx=f71d1eec edx=00000000 esi=81e3c338 edi=00c600c6

eip=f71c88b9 esp=f5244444 ebp=f5244564 iopl=0         nv up ei pl zr na pe nc

cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00000246

Ntfs!NtfsCommonCreate+0x127e:

f71c88b9 8945e4          mov     dword ptr [ebp-1Ch],eax ss:0010:f5244548=00000000