NTSTATUS 0xC0220101 (STATUS_FWP_INJECT_HANDLE

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

A WFP injection handle is being closed by another thread.

Previous	Next
STATUS_FWP_TCPIP_NOT_READY	STATUS_FWP_INJECT_HANDLE_STALE

STATUS_FWP_INJECT_HANDLE_CLOSING

Packet injection raced with injection-handle shutdown

These status values come from the Windows Filtering Platform path. For STATUS_FWP_INJECT_HANDLE_CLOSING, wFP classifies traffic through layers, filters, provider contexts, sublayers, and callouts; IPsec policy is also configured through WFP at IKE/AuthIP-related layers.

WFP packet injection uses handles that must outlive the injection operation. This status means another thread is closing that handle while injection is being attempted.

For STATUS_FWP_INJECT_HANDLE_CLOSING, for diagnostics, keep the failing API call, layer or sublayer key, provider context type, filter condition set, callout id, engine state, and whether the Base Filtering Engine, IKEEXT, TCP/IP stack, or L2 path was ready.

What to inspect

Serialize injection with handle teardown.
Stop new injections before closing the handle.
Check callout unload, flow deletion, and driver stop paths.

References for STATUS_FWP_INJECT_HANDLE_CLOSING

Looking for a different code? Search another status or error code.