[Bug]: VBoxNetLwf logs internal driver error (Event ID 12) on every S3 sleep/wake resume - host-side NDIS filter driver power-transition issue

[xinyulan810]

Version

7.2.12 (driver VBoxNetLwf.sys 7.2.12.174389)

Host OS Type

Windows

Host OS name + version

Windows 11 Home 24H2 (Build 26100, zh-CN, x64)

Host Architecture

x86

Guest OS Type

all

Guest Architecture

x86

Guest OS name + version

N/A — the error occurs with no VM running (host-side NDIS filter driver issue)

Component

Network

What happened?

The VBoxNetLwf (NDIS 6.0 lightweight filter driver) logs a driver error event every time the Windows host wakes from S3 standby:

Event ID 12, Source: VBoxNetLwf, Level: Error
"驱动程序在 \Device\VBoxNetLwf 上检测到内部驱动程序错误。"
("The driver detected an internal driver error on \Device\VBoxNetLwf.")

• 69 occurrences since 2026-07-09 (the exact day VirtualBox 7.2.12 was installed) up to 2026-08-14 — essentially daily, often multiple times per day.
• 21 occurrences in the last 14 days; 19 of 21 (90%) happen within ~1–2 seconds of an S3 resume (correlated with Kernel-Power events 130/131/566, reason SxTransition). The error fires during the power-transition (resume) handling of the filter driver.
• The error is logged by PID 4 (System) and is independent of any VM being started/stopped — the filter is bound to host adapters and is active whenever the host network stack runs.
• Sample event XML (most recent, 2026-08-14 11:54:26, right after resume at 11:54:24):

<EventID Qualifiers='49156'>12</EventID>
<Level>2</Level>
<EventData>
  <Data>\Device\VBoxNetLwf</Data>
  <Binary>0000200001000000000000000C0004C008000000000000000000000000000000000000000000000000059A3C7A00EE8E77AF414BEC8E77AF414CEC8E77AF414BD4939058B9C40000</Binary>
</EventData>

Timeline sample (all timestamps local, UTC+8):

VBoxNetLwf ID 12	Kernel-Power resume (ID 131)
2026-08-07 10:19:13	2026-08-07 10:19:11
2026-08-09 22:41:13	2026-08-09 22:41:11
2026-08-11 12:52:59	2026-08-11 12:52:57
2026-08-12 22:48:34	2026-08-12 22:48:32
2026-08-13 16:27:53	2026-08-13 16:27:48
2026-08-14 11:54:26	2026-08-14 11:54:24

Expected behavior: no driver error event when the host resumes from standby.

Impact observed by the user: the error itself does not crash the host, but it indicates the filter driver mis-handles the S3 power transition. On this same machine the desktop right-click occasionally hangs after wake and the shell gets restarted (reported separately to PowerToys); the recurring network-stack error on every resume is suspected as a contributing factor, and it pollutes the event log daily.

How can we reproduce this?

1. Install VirtualBox 7.2.12 on Windows 11 24H2 (per-user or machine install).
2. Do not start any VM (not required).
3. Put the host to sleep (S3 standby) for any duration.
4. Wake it and wait ~2 seconds.
5. Open Event Viewer → Windows Logs → System, filter source VBoxNetLwf: an Error event ID 12 on \Device\VBoxNetLwf appears, within 1–2 s of the Kernel-Power 131/566 resume events.

Happens on every wake, reliably, since installing 7.2.12.

Did you upload all of your necessary log files, screenshots, etc.?

• Yes, I've uploaded all pertinent files to this issue.

(Event-log excerpts are embedded above; no VBox.log applies since no guest is involved. Happy to attach the exported System event log (.evtx) or a vboxmanage showvminfo/driver dump if useful.)