VBoxDrv.sys BSoD when suspending/shutting down guest -- mutex lock issue

[jarz]

Whenever I attempt to suspend or shut down a guest, system blue-screens.

WinDbg suggests locks freed in reverse order.

Windows 7 Professional 64-bit 8 GB RAM

Information from full memory dump Bugcheck Analysis

DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught.  This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 0000000000001003, Releasing two locks in reverse order of their acquire.
Arg2: fffff980280ccfc8, First lock address.
Arg3: fffff980281a0fc8, Second lock address.
Arg4: fffffa8008e21090, Verifier internal data.

Additional debug text:

MODULE_NAME: VBoxDrv

FAULTING_MODULE: fffff80002e13000 nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4e89c9b2

BUGCHECK_STR:  0xc4_1003

DRIVER_DEADLOCK: Error: incorrect symbols for kernel 

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff800033193dc to fffff80002e8fc40

STACK_TEXT:  
fffff880`09d33558 fffff800`033193dc : 00000000`000000c4 00000000`00001003 fffff980`280ccfc8 fffff980`281a0fc8 : nt!KeBugCheckEx
fffff880`09d33560 fffff800`0331a5c8 : fffff980`280ccfc8 fffff800`0331a852 fffffa80`06b28ee0 00000000`00000003 : nt!NtShutdownSystem+0x7a4c
fffff880`09d335a0 fffff800`03326817 : 00000000`000076fa fffff880`03e77b3f fffff800`03318290 fffff980`280ccfc8 : nt!NtShutdownSystem+0x8c38
fffff880`09d335e0 fffff800`03327945 : fffff980`280ccfc8 00000000`00000001 00000000`00000000 fffff880`03e5f1ab : nt!NtShutdownSystem+0x14e87
fffff880`09d336a0 fffff880`03e77b3f : 00000000`00000006 00000000`00000000 fffffa80`082aa010 fffffa80`08e94bc0 : nt!NtShutdownSystem+0x15fb5
fffff880`09d336d0 fffff880`09eee15d : fffff980`280ccfc8 fffff980`28020901 fffffa80`08e94bc0 fffff980`00000000 : VBoxDrv!RTSemFastMutexRelease+0x3f
fffff880`09d33700 fffff880`09eef055 : fffffa80`06b151f0 fffffa80`0830b010 00000000`00000000 fffff880`00000008 : VMMR0!GMMR0Term+0x4cd
fffff880`09d33770 fffff880`09ef0d00 : fffff980`28020990 fffff800`0332624c fffffa80`06b15148 fffff980`28020990 : VMMR0!GMMR0CleanupVM+0x115
fffff880`09d337d0 fffff880`03e60854 : fffff980`28110fc0 fffff980`28020990 fffffa80`08e94bc0 ffff8000`00000000 : VMMR0!GVMMR0DestroyVM+0x4b0
fffff880`09d33810 fffff880`09ef0a47 : fffffa80`082aa070 fffffa80`082aa010 00000000`00000000 fffffa80`07e360d8 : VBoxDrv!SUPR0ObjRelease+0x184
fffff880`09d33850 fffff880`09f00ba8 : fffff980`28a6cfd0 fffff980`28a6cfd0 fffffa80`08e94bc0 fffff980`270a4fb0 : VMMR0!GVMMR0DestroyVM+0x1f7
fffff880`09d338b0 fffff880`03e65d11 : fffff980`270a4ff8 00000000`00000000 fffffa80`08e94a70 00000000`00000002 : VMMR0!VMMR0EntryEx+0xe8
fffff880`09d33920 fffff880`03e5f1ab : fffff880`09d33a28 00000000`00000000 00000000`00000000 00000000`00000001 : VBoxDrv!SUPR0PageFree+0x2021
fffff880`09d33970 fffff800`03335c16 : fffff980`270a4ee0 00000000`00000002 fffffa80`08e94a70 fffffa80`06d64518 : VBoxDrv+0x11ab
fffff880`09d339b0 fffff800`031aaa97 : fffffa80`07fe1740 fffff880`09d33ca0 fffffa80`07fe1740 fffffa80`081c91e0 : nt!NtShutdownSystem+0x24286
fffff880`09d33a10 fffff800`031ab2f6 : fffffa80`08aaa001 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtMapViewOfSection+0x15c7
fffff880`09d33b40 fffff800`02e8eed3 : 00000000`00000000 fffff800`03178b5c fffff880`09d33ca0 00000000`00000000 : nt!NtDeviceIoControlFile+0x56
fffff880`09d33bb0 00000000`76f9138a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeSynchronizeExecution+0x3a43
00000000`047efc88 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76f9138a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
VBoxDrv!RTSemFastMutexRelease+3f
fffff880`03e77b3f 33c0            xor     eax,eax

SYMBOL_STACK_INDEX:  5

SYMBOL_NAME:  VBoxDrv!RTSemFastMutexRelease+3f

FOLLOWUP_NAME:  MachineOwner

IMAGE_NAME:  VBoxDrv.sys

BUCKET_ID:  WRONG_SYMBOLS

[jarz]

Minidump

[jarz]

Most recent VBox.log