Virtualbox host process crashes or VM hangs when hibernating Windows guest

[mTi3Ad9vN]

On 4.1.16, 4.1.12, and possibly earlier version of Virtualbox, the virtualbox process crashes or the VM hangs while hibernating a Windows XP SP2 guest. The problem is easy to reproduce:

1. Start Windows.
2. Open control panel.
3. Open hearts and select the two right-hand cards on the bottom hand. [This and the prior step are probably not necessary, but I don't have time to see whether that's so.]
4. Open task manager and click the performance tab.
5. Open notepad. Type random characters. Copy them and paste them back several times. Do this, multiplying the number of characters several times until memory usage in task manager reaches ~ 512MB.
6. Attempt to hibernate Windows.
7. Either the Virtualbox process underlying the VM will crash with a stack like the following (as determined by using VS 2008 as a JIT debugger to handle the crash) or the VM will hang at the "Preparing to Hibernate" screen.

   VBoxDD.dll!00000000067b4cdd()
   [Frames below may be incorrect and/or missing...]
   VBoxRT.dll!00000000003eaf0f
   VBoxRT.dll!000000000043e1ca
   msvcr80.dll!0000000074ca37d7
   msvcr80.dll!0000000074ca3894
   kernel32.dll!0000000076f5652d
   ntdll.dll!000000007708c521
   

The host OS is Win 7 Ultimate SP1 x64, and the guest OS is Win XP SP2.

Attached is a log from a hang (hiberhang.txt), and another from a crash (hibercrash.txt). Note the following lines from hibercrash.txt:

00:06:02.891 !!Assertion Failed!!
00:06:02.891 Expression: ReqType == ATA_AIO_RESET_ASSERTED || ReqType == ATA_AIO_RESET_CLEARED || ReqType == ATA_AIO_ABORT || pCtl->uAsyncIOState == ReqType
00:06:02.891 Location  : D:\tinderbox\win-4.1\src\VBox\Devices\Storage\DevATA.cpp(4883) ataAsyncIOLoop
00:06:02.891 I/O state inconsistent: state=0 request=2
00:08:51.497 TM: Not bothering to attempt catching up a 166 805 625 068 ns lag; new total: 166 805 625 068
00:09:05.219 Entering S5 power state (power down)
00:09:05.227 Changing the VM state from 'RUNNING' to 'POWERING_OFF'.