From the docs about FltQueueDeferredIoWorkItem it says
"Caution To avoid deadlocks, a minifilter must not post an I/O operation to a system work queue in the post-operation callback for any I/O operations that a driver can complete directly in the storage stack, such as the following:
IRP_MJ_READ
IRP_MJ_WRITE
IRP_MJ_FLUSH_BUFFERS
"
Is this still dangerous if the posting is never done for the paging file? If so, I must not understand some behavior involved in posting to a work queue. Can anyone enlighten me?