Hi,
The notification routine can change the list, as there is no lock involved.
List is locked by the caller. Have a look to: IoRegisterFsRegistrationChange().
Regarding all your remarks: thank you! They have been used to fix code and commited in r52073.
Regards, P. Schweitzer