As the attached testcase shows, the creation of an update query that has parameters in a subquery fails because the parameters can't be found in the ParameterTranslations resulting in a NPE. This apparently only happens when the subquery is wrapped in a function.