https://bugs.freedesktop.org/show_bug.cgi?id=99396

--- Comment #6 from Tommi Rantala <tommi.t.rant...@nokia.com> ---
I'm also seeing this crash regularly with HP ZBook 15 G3, that has NVIDIA GPU.
I'm using Fedora 25.

$ lspci|grep NVIDIA
01:00.0 VGA compatible controller: NVIDIA Corporation GM107GLM [Quadro M2000M]
(rev a2)

(gdb) bt
#0  0x00007f3f8905a513 in __memmove_avx_unaligned_erms () at
../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:218
#1  0x00007f3f67656fa0 in memcpy (__len=48, __src=<optimized out>,
__dest=<optimized out>) at /usr/include/bits/string3.h:53
#2  0x00007f3f67656fa0 in nouveau_scratch_data (nv=nv@entry=0x55eb41056660,
data=<optimized out>, base=base@entry=0, size=size@entry=48,
bo=bo@entry=0x7ffc757da7f0) at nouveau_buffer.c:1006
#3  0x00007f3f6776fad8 in nvc0_update_user_vbufs_shared (nvc0=0x55eb41056660)
at nvc0/nvc0_vbo.c:292
#4  0x00007f3f67764e25 in nvc0_state_validate (nvc0=nvc0@entry=0x55eb41056660,
mask=mask@entry=4294967295, validate_list=validate_list@entry=0x7f3f67e07020
<validate_list_3d>, size=size@entry=33, dirty=dirty@entry=0x55eb41056a60,
bufctx=0x55eb4105a020) at nvc0/nvc0_state_validate.c:832
#5  0x00007f3f67765007 in nvc0_state_validate_3d
(nvc0=nvc0@entry=0x55eb41056660, mask=mask@entry=4294967295) at
nvc0/nvc0_state_validate.c:850
#6  0x00007f3f67770e94 in nvc0_draw_vbo (pipe=0x55eb41056660,
info=0x7ffc757da990) at nvc0/nvc0_vbo.c:977
#7  0x00007f3f674d3ed2 in cso_draw_arrays (cso=cso@entry=0x55eb4103e530,
mode=mode@entry=5, start=start@entry=0, count=count@entry=4) at
cso_cache/cso_context.c:1686
#8  0x00007f3f6736a6d0 in st_pbo_draw (st=st@entry=0x55eb4105e810,
addr=addr@entry=0x7ffc757dacc0, surface_width=<optimized out>,
surface_height=<optimized out>) at state_tracker/st_pbo.c:283
#9  0x00007f3f673320f1 in try_pbo_upload_common (ctx=ctx@entry=0x55eb41069510,
surface=0x55eb43688f90, addr=addr@entry=0x7ffc757dacc0,
src_format=src_format@entry=PIPE_FORMAT_B8G8R8A8_UNORM)
    at state_tracker/st_cb_texture.c:1222
#10 0x00007f3f673378c5 in try_pbo_upload (unpack=0x55eb41084778, pixels=0x0,
depth=1, height=27, width=96, zoffset=<optimized out>, yoffset=0, xoffset=0,
dst_format=
    PIPE_FORMAT_B8G8R8A8_UNORM, type=5121, format=32993,
texImage=0x55eb411707f0, dims=2, ctx=0x55eb41069510) at
state_tracker/st_cb_texture.c:1337
#11 0x00007f3f673378c5 in st_TexSubImage (ctx=ctx@entry=0x55eb41069510,
dims=dims@entry=2, texImage=texImage@entry=0x55eb411707f0,
xoffset=xoffset@entry=0, yoffset=yoffset@entry=0, zoffset=zoffset@entry=0,
width=96, height=27, depth=1, format=32993, type=5121, pixels=0x0,
unpack=0x55eb41084778) at state_tracker/st_cb_texture.c:1450
#12 0x00007f3f67338710 in st_TexImage (ctx=0x55eb41069510, dims=2,
texImage=0x55eb411707f0, format=32993, type=5121, pixels=0x0,
unpack=0x55eb41084778) at state_tracker/st_cb_texture.c:1625
#13 0x00007f3f672bb697 in teximage (ctx=0x55eb41069510,
compressed=compressed@entry=0 '\000', dims=dims@entry=2, target=3553, level=0,
internalFormat=6408, width=96, height=27, depth=1, border=0, format=32993,
type=5121, imageSize=0, pixels=0x0) at main/teximage.c:3066
#14 0x00007f3f672bc490 in _mesa_TexImage2D (target=<optimized out>,
level=<optimized out>, internalFormat=<optimized out>, width=<optimized out>,
height=<optimized out>, border=<optimized out>, format=32993, type=5121,
pixels=0x0) at main/teximage.c:3105
#15 0x00007f3f8ba88bcd in _cogl_texture_driver_upload_to_gl
(ctx=0x55eb41040350, gl_target=3553, gl_handle=<optimized out>, is_foreign=0,
source_bmp=0x7f3f6805ed80, internal_gl_format=6408, source_gl_format=32993,
source_gl_type=5121, error=0x7ffc757db160) at
driver/gl/gl/cogl-texture-driver-gl.c:343
#16 0x00007f3f8ba7a1c4 in allocate_from_bitmap (loader=<optimized out>,
loader=<optimized out>, error=0x7ffc757db160, tex_2d=0x55eb42d19940) at
driver/gl/cogl-texture-2d-gl.c:253
#17 0x00007f3f8ba7a1c4 in _cogl_texture_2d_gl_allocate (tex=0x55eb42d19940,
error=0x7ffc757db160) at driver/gl/cogl-texture-2d-gl.c:456
#18 0x00007f3f8baaf536 in cogl_texture_allocate
(texture=texture@entry=0x55eb42d19940, error=error@entry=0x7ffc757db160) at
cogl-texture.c:1398
#19 0x00007f3f8bacaacb in _cogl_texture_new_from_bitmap (bitmap=0x7f3f6805ed80,
flags=flags@entry=COGL_TEXTURE_NO_SLICING,
internal_format=internal_format@entry=COGL_PIXEL_FORMAT_BGRA_8888_PRE,
can_convert_in_place=can_convert_in_place@entry=0,
error=error@entry=0x7ffc757db1c0) at deprecated/cogl-auto-texture.c:246
#20 0x00007f3f8bacafc9 in cogl_texture_new_from_bitmap (bitmap=<optimized out>,
flags=flags@entry=COGL_TEXTURE_NO_SLICING,
internal_format=internal_format@entry=COGL_PIXEL_FORMAT_BGRA_8888_PRE)
    at deprecated/cogl-auto-texture.c:294
#21 0x00007f3f8e373053 in clutter_canvas_paint_content (content=<optimized
out>, actor=0x55eb4338b290 [StDrawingArea], root=0x55eb439af060
[ClutterDummyNode]) at clutter-canvas.c:376
#22 0x00007f3f8e34f76d in clutter_actor_paint_node (root=0x55eb439af060
[ClutterDummyNode], actor=0x55eb4338b290 [StDrawingArea]) at
clutter-actor.c:3709
#23 0x00007f3f8e34f76d in clutter_actor_continue_paint
(self=self@entry=0x55eb4338b290 [StDrawingArea]) at clutter-actor.c:4014
#24 0x00007f3f8e3559bb in clutter_actor_paint (self=self@entry=0x55eb4338b290
[StDrawingArea]) at clutter-actor.c:3938
#25 0x00007f3f8e355cd9 in clutter_actor_paint (self=self@entry=0x55eb4338b290
[StDrawingArea]) at clutter-actor.c:3964
#26 0x00007f3f93e2aa00 in st_box_layout_paint (actor=<optimized out>) at
st/st-box-layout.c:428
#30 0x00007f3f8add843f in <emit signal ??? on instance 0x55eb433639b0
[StBoxLayout]> (instance=instance@entry=0x55eb433639b0, signal_id=<optimized
out>, detail=detail@entry=0) at gsignal.c:3447
    #27 0x00007f3f8adbd33f in g_closure_invoke
(closure=closure@entry=0x55eb410fca90, return_value=return_value@entry=0x0,
n_param_values=1, param_values=param_values@entry=0x7ffc757db5a0,
invocation_hint=invocation_hint@entry=0x7ffc757db520) at gclosure.c:804
    #28 0x00007f3f8adcf82d in signal_emit_unlocked_R
(node=node@entry=0x55eb410fd790, detail=detail@entry=0,
instance=instance@entry=0x55eb433639b0,
emission_return=emission_return@entry=0x0,
instance_and_params=instance_and_params@entry=0x7ffc757db5a0) at gsignal.c:3673
    #29 0x00007f3f8add805f in g_signal_emit_valist (instance=<optimized out>,
signal_id=<optimized out>, detail=<optimized out>,
var_args=var_args@entry=0x7ffc757db760) at gsignal.c:3391
#31 0x00007f3f8e34f7b3 in clutter_actor_continue_paint
(self=self@entry=0x55eb433639b0 [StBoxLayout]) at clutter-actor.c:4018
#32 0x00007f3f8e3559bb in clutter_actor_paint (self=self@entry=0x55eb433639b0
[StBoxLayout]) at clutter-actor.c:3938
#33 0x00007f3f8e355cd9 in clutter_actor_paint (self=self@entry=0x55eb433639b0
[StBoxLayout]) at clutter-actor.c:3964
#34 0x00007f3f93e2aa00 in st_box_layout_paint (actor=<optimized out>) at
st/st-box-layout.c:428
#38 0x00007f3f8add843f in <emit signal ??? on instance 0x55eb43512540
[StBoxLayout]> (instance=instance@entry=0x55eb43512540, signal_id=<optimized
out>, detail=detail@entry=0) at gsignal.c:3447
    #35 0x00007f3f8adbd33f in g_closure_invoke
(closure=closure@entry=0x55eb410fca90, return_value=return_value@entry=0x0,
n_param_values=1, param_values=param_values@entry=0x7ffc757dbbe0,
invocation_hint=invocation_hint@entry=0x7ffc757dbb60) at gclosure.c:804
    #36 0x00007f3f8adcf82d in signal_emit_unlocked_R
(node=node@entry=0x55eb410fd790, detail=detail@entry=0,
instance=instance@entry=0x55eb43512540,
emission_return=emission_return@entry=0x0,
instance_and_params=instance_and_params@entry=0x7ffc757dbbe0) at gsignal.c:3673
    #37 0x00007f3f8add805f in g_signal_emit_valist (instance=<optimized out>,
signal_id=<optimized out>, detail=<optimized out>,
var_args=var_args@entry=0x7ffc757dbda0) at gsignal.c:3391
#39 0x00007f3f8e34f7b3 in clutter_actor_continue_paint
(self=self@entry=0x55eb43512540 [StBoxLayout]) at clutter-actor.c:4018
#40 0x00007f3f8e3559bb in clutter_actor_paint (self=self@entry=0x55eb43512540
[StBoxLayout]) at clutter-actor.c:3938
#41 0x00007f3f8e355cd9 in clutter_actor_paint (self=self@entry=0x55eb43512540
[StBoxLayout]) at clutter-actor.c:3964
#42 0x00007f3f93e20530 in shell_generic_container_paint (actor=0x55eb43329f90
[ShellGenericContainer]) at shell-generic-container.c:149
#46 0x00007f3f8add843f in <emit signal ??? on instance 0x55eb43329f90
[ShellGenericContainer]> (instance=instance@entry=0x55eb43329f90,
signal_id=<optimized out>, detail=detail@entry=0) at gsignal.c:3447
    #43 0x00007f3f8adbd33f in g_closure_invoke
(closure=closure@entry=0x55eb410fca90, return_value=return_value@entry=0x0,
n_param_values=1, param_values=param_values@entry=0x7ffc757dc1d0,
invocation_hint=invocation_hint@entry=0x7ffc757dc150) at gclosure.c:804
    #44 0x00007f3f8adcf82d in signal_emit_unlocked_R
(node=node@entry=0x55eb410fd790, detail=detail@entry=0,
instance=instance@entry=0x55eb43329f90,
emission_return=emission_return@entry=0x0,
instance_and_params=instance_and_params@entry=0x7ffc757dc1d0) at gsignal.c:3673
    #45 0x00007f3f8add805f in g_signal_emit_valist (instance=<optimized out>,
signal_id=<optimized out>, detail=<optimized out>,
var_args=var_args@entry=0x7ffc757dc390) at gsignal.c:3391
#47 0x00007f3f8e34f7b3 in clutter_actor_continue_paint
(self=self@entry=0x55eb43329f90 [ShellGenericContainer]) at
clutter-actor.c:4018
#48 0x00007f3f8e3559bb in clutter_actor_paint (self=0x55eb43329f90
[ShellGenericContainer]) at clutter-actor.c:3938
#49 0x00007f3f8e355d00 in clutter_actor_real_paint (actor=<optimized out>) at
clutter-actor.c:3637
#53 0x00007f3f8add843f in <emit signal ??? on instance 0x55eb4332b750 [StBin]>
(instance=instance@entry=0x55eb4332b750, signal_id=<optimized out>,
detail=detail@entry=0) at gsignal.c:3447
    #50 0x00007f3f8adbd33f in g_closure_invoke
(closure=closure@entry=0x55eb410fca90, return_value=return_value@entry=0x0,
n_param_values=1, param_values=param_values@entry=0x7ffc757dc7b0,
invocation_hint=invocation_hint@entry=0x7ffc757dc730) at gclosure.c:804
    #51 0x00007f3f8adcf82d in signal_emit_unlocked_R
(node=node@entry=0x55eb410fd790, detail=detail@entry=0,
instance=instance@entry=0x55eb4332b750,
emission_return=emission_return@entry=0x0,
instance_and_params=instance_and_params@entry=0x7ffc757dc7b0) at gsignal.c:3673
    #52 0x00007f3f8add805f in g_signal_emit_valist (instance=<optimized out>,
signal_id=<optimized out>, detail=<optimized out>,
var_args=var_args@entry=0x7ffc757dc970) at gsignal.c:3391
#54 0x00007f3f8e34f7b3 in clutter_actor_continue_paint
(self=self@entry=0x55eb4332b750 [StBin]) at clutter-actor.c:4018
#55 0x00007f3f8e3559bb in clutter_actor_paint (self=self@entry=0x55eb4332b750
[StBin]) at clutter-actor.c:3938
#56 0x00007f3f8e355cd9 in clutter_actor_paint (self=self@entry=0x55eb4332b750
[StBin]) at clutter-actor.c:3964
#57 0x00007f3f93e2aa00 in st_box_layout_paint (actor=<optimized out>) at
st/st-box-layout.c:428
#61 0x00007f3f8add843f in <emit signal ??? on instance 0x55eb41b509a0
[StBoxLayout]> (instance=instance@entry=0x55eb41b509a0, signal_id=<optimized
out>, detail=detail@entry=0) at gsignal.c:3447
    #58 0x00007f3f8adbd33f in g_closure_invoke
(closure=closure@entry=0x55eb410fca90, return_value=return_value@entry=0x0,
n_param_values=1, param_values=param_values@entry=0x7ffc757dcdf0,
invocation_hint=invocation_hint@entry=0x7ffc757dcd70) at gclosure.c:804
    #59 0x00007f3f8adcf82d in signal_emit_unlocked_R
(node=node@entry=0x55eb410fd790, detail=detail@entry=0,
instance=instance@entry=0x55eb41b509a0,
emission_return=emission_return@entry=0x0,
instance_and_params=instance_and_params@entry=0x7ffc757dcdf0) at gsignal.c:3673
    #60 0x00007f3f8add805f in g_signal_emit_valist (instance=<optimized out>,
signal_id=<optimized out>, detail=<optimized out>,
var_args=var_args@entry=0x7ffc757dcfb0) at gsignal.c:3391
#62 0x00007f3f8e34f7b3 in clutter_actor_continue_paint
(self=self@entry=0x55eb41b509a0 [StBoxLayout]) at clutter-actor.c:4018
#63 0x00007f3f8e3559bb in clutter_actor_paint (self=self@entry=0x55eb41b509a0
[StBoxLayout]) at clutter-actor.c:3938
#64 0x00007f3f8e355cd9 in clutter_actor_paint (self=self@entry=0x55eb41b509a0
[StBoxLayout]) at clutter-actor.c:3964
#65 0x00007f3f93e20530 in shell_generic_container_paint (actor=0x55eb41b4e750
[ShellGenericContainer]) at shell-generic-container.c:149
#69 0x00007f3f8add843f in <emit signal ??? on instance 0x55eb41b4e750
[ShellGenericContainer]> (instance=instance@entry=0x55eb41b4e750,
signal_id=<optimized out>, detail=detail@entry=0) at gsignal.c:3447
    #66 0x00007f3f8adbd33f in g_closure_invoke
(closure=closure@entry=0x55eb410fca90, return_value=return_value@entry=0x0,
n_param_values=1, param_values=param_values@entry=0x7ffc757dd3e0,
invocation_hint=invocation_hint@entry=0x7ffc757dd360) at gclosure.c:804
    #67 0x00007f3f8adcf82d in signal_emit_unlocked_R
(node=node@entry=0x55eb410fd790, detail=detail@entry=0,
instance=instance@entry=0x55eb41b4e750,
emission_return=emission_return@entry=0x0,
instance_and_params=instance_and_params@entry=0x7ffc757dd3e0) at gsignal.c:3673
    #68 0x00007f3f8add805f in g_signal_emit_valist (instance=<optimized out>,
signal_id=<optimized out>, detail=<optimized out>,
var_args=var_args@entry=0x7ffc757dd5a0) at gsignal.c:3391
#70 0x00007f3f8e34f7b3 in clutter_actor_continue_paint
(self=self@entry=0x55eb41b4e750 [ShellGenericContainer]) at
clutter-actor.c:4018
#71 0x00007f3f8e3559bb in clutter_actor_paint (self=self@entry=0x55eb41b4e750
[ShellGenericContainer]) at clutter-actor.c:3938
#72 0x00007f3f8e355cd9 in clutter_actor_paint (self=self@entry=0x55eb41b4e750
[ShellGenericContainer]) at clutter-actor.c:3964
#73 0x00007f3f93e2aa00 in st_box_layout_paint (actor=<optimized out>) at
st/st-box-layout.c:428
#77 0x00007f3f8add843f in <emit signal ??? on instance 0x55eb41a24010
[StBoxLayout]> (instance=instance@entry=0x55eb41a24010, signal_id=<optimized
out>, detail=detail@entry=0) at gsignal.c:3447
    #74 0x00007f3f8adbd33f in g_closure_invoke
(closure=closure@entry=0x55eb410fca90, return_value=return_value@entry=0x0,
n_param_values=1, param_values=param_values@entry=0x7ffc757dda20,
invocation_hint=invocation_hint@entry=0x7ffc757dd9a0) at gclosure.c:804
    #75 0x00007f3f8adcf82d in signal_emit_unlocked_R
(node=node@entry=0x55eb410fd790, detail=detail@entry=0,
instance=instance@entry=0x55eb41a24010,
emission_return=emission_return@entry=0x0,
instance_and_params=instance_and_params@entry=0x7ffc757dda20) at gsignal.c:3673
    #76 0x00007f3f8add805f in g_signal_emit_valist (instance=<optimized out>,
signal_id=<optimized out>, detail=<optimized out>,
var_args=var_args@entry=0x7ffc757ddbe0) at gsignal.c:3391
#78 0x00007f3f8e34f7b3 in clutter_actor_continue_paint
(self=self@entry=0x55eb41a24010 [StBoxLayout]) at clutter-actor.c:4018
---Type <return> to continue, or q <return> to quit---
#79 0x00007f3f8e3559bb in clutter_actor_paint (self=self@entry=0x55eb41a24010
[StBoxLayout]) at clutter-actor.c:3938
#80 0x00007f3f8e355cd9 in clutter_actor_paint (self=self@entry=0x55eb41a24010
[StBoxLayout]) at clutter-actor.c:3964
#81 0x00007f3f93e20530 in shell_generic_container_paint (actor=0x55eb419e0540
[ShellGenericContainer]) at shell-generic-container.c:149
#85 0x00007f3f8add843f in <emit signal ??? on instance 0x55eb419e0540
[ShellGenericContainer]> (instance=instance@entry=0x55eb419e0540,
signal_id=<optimized out>, detail=detail@entry=0) at gsignal.c:3447
    #82 0x00007f3f8adbd33f in g_closure_invoke
(closure=closure@entry=0x55eb410fca90, return_value=return_value@entry=0x0,
n_param_values=1, param_values=param_values@entry=0x7ffc757de010,
invocation_hint=invocation_hint@entry=0x7ffc757ddf90) at gclosure.c:804
    #83 0x00007f3f8adcf82d in signal_emit_unlocked_R
(node=node@entry=0x55eb410fd790, detail=detail@entry=0,
instance=instance@entry=0x55eb419e0540,
emission_return=emission_return@entry=0x0,
instance_and_params=instance_and_params@entry=0x7ffc757de010) at gsignal.c:3673
    #84 0x00007f3f8add805f in g_signal_emit_valist (instance=<optimized out>,
signal_id=<optimized out>, detail=<optimized out>,
var_args=var_args@entry=0x7ffc757de1d0) at gsignal.c:3391
#86 0x00007f3f8e34f7b3 in clutter_actor_continue_paint
(self=self@entry=0x55eb419e0540 [ShellGenericContainer]) at
clutter-actor.c:4018
#87 0x00007f3f8e3559bb in clutter_actor_paint (self=0x55eb419e0540
[ShellGenericContainer]) at clutter-actor.c:3938
#88 0x00007f3f8e355cd9 in clutter_actor_paint (self=<optimized out>) at
clutter-actor.c:3964
#89 0x00007f3f8e3a83fa in clutter_stage_paint (self=<optimized out>) at
clutter-stage.c:710
#90 0x00007f3f8f2b62a6 in meta_stage_paint (actor=0x55eb40fb0760 [MetaStage])
at backends/meta-stage.c:141
#94 0x00007f3f8add843f in <emit signal ??? on instance 0x55eb40fb0760
[MetaStage]> (instance=instance@entry=0x55eb40fb0760, signal_id=<optimized
out>, detail=detail@entry=0) at gsignal.c:3447
    #91 0x00007f3f8adbd3e5 in g_closure_invoke
(closure=closure@entry=0x55eb410fca90, return_value=return_value@entry=0x0,
n_param_values=1, param_values=param_values@entry=0x7ffc757de680,
invocation_hint=invocation_hint@entry=0x7ffc757de600) at gclosure.c:804
    #92 0x00007f3f8adcf82d in signal_emit_unlocked_R
(node=node@entry=0x55eb410fd790, detail=detail@entry=0,
instance=instance@entry=0x55eb40fb0760,
emission_return=emission_return@entry=0x0,
instance_and_params=instance_and_params@entry=0x7ffc757de680) at gsignal.c:3673
    #93 0x00007f3f8add805f in g_signal_emit_valist (instance=<optimized out>,
signal_id=<optimized out>, detail=<optimized out>,
var_args=var_args@entry=0x7ffc757de840) at gsignal.c:3391
#95 0x00007f3f8e34f7b3 in clutter_actor_continue_paint
(self=self@entry=0x55eb40fb0760 [MetaStage]) at clutter-actor.c:4018
#96 0x00007f3f8e3559bb in clutter_actor_paint (self=self@entry=0x55eb40fb0760
[MetaStage]) at clutter-actor.c:3938
#97 0x00007f3f8e355cd9 in clutter_actor_paint (self=self@entry=0x55eb40fb0760
[MetaStage]) at clutter-actor.c:3964
#98 0x00007f3f8e3ac4e5 in clutter_stage_do_paint_view
(stage=stage@entry=0x55eb40fb0760 [MetaStage], view=view@entry=0x55eb41125140
[MetaRendererView], clip=clip@entry=0x7ffc757debe0) at clutter-stage.c:678
#99 0x00007f3f8e3ac553 in _clutter_stage_paint_view
(stage=stage@entry=0x55eb40fb0760 [MetaStage], view=view@entry=0x55eb41125140
[MetaRendererView], clip=clip@entry=0x7ffc757debe0) at clutter-stage.c:694
#100 0x00007f3f8e341144 in paint_stage
(stage_cogl=stage_cogl@entry=0x55eb4110f860 [MetaStageNative],
view=view@entry=0x55eb41125140 [MetaRendererView],
clip=clip@entry=0x7ffc757debe0)
    at cogl/clutter-stage-cogl.c:422
#101 0x00007f3f8e3414ee in clutter_stage_cogl_redraw_view (view=0x55eb41125140
[MetaRendererView], stage_window=0x55eb4110f860) at
cogl/clutter-stage-cogl.c:667
#102 0x00007f3f8e3414ee in clutter_stage_cogl_redraw
(stage_window=0x55eb4110f860) at cogl/clutter-stage-cogl.c:783
#103 0x00007f3f8f3334ae in meta_stage_native_redraw
(stage_window=0x55eb4110f860) at backends/native/meta-stage-native.c:300
#104 0x00007f3f8e3a9357 in clutter_stage_do_redraw (stage=0x55eb40fb0760
[MetaStage]) at clutter-stage.c:1120
#105 0x00007f3f8e3a9357 in _clutter_stage_do_update (stage=0x55eb40fb0760
[MetaStage]) at clutter-stage.c:1176
#106 0x00007f3f8e394d49 in master_clock_update_stages
(master_clock=0x55eb41127ec0 [ClutterMasterClockDefault], stages=0x55eb439e4e80
= {...}) at clutter-master-clock-default.c:443
#107 0x00007f3f8e394d49 in clutter_clock_dispatch (source=<optimized out>,
callback=<optimized out>, user_data=<optimized out>) at
clutter-master-clock-default.c:567
#108 0x00007f3f8aae4e52 in g_main_dispatch (context=0x55eb40f9d730) at
gmain.c:3203
#109 0x00007f3f8aae4e52 in g_main_context_dispatch
(context=context@entry=0x55eb40f9d730) at gmain.c:3856
#110 0x00007f3f8aae51d0 in g_main_context_iterate (context=0x55eb40f9d730,
block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at
gmain.c:3929
#111 0x00007f3f8aae54f2 in g_main_loop_run (loop=0x55eb4112b990) at
gmain.c:4125
#112 0x00007f3f8f2e159c in meta_run () at core/main.c:572
#113 0x000055eb40aa1657 in main (argc=<optimized out>, argv=<optimized out>) at
main.c:471



According to the coredump, the memcpy in nouveau_scratch_data() is failing
because nv->scratch.map is invalid.

/usr/src/debug/mesa-13.0.4/src/gallium/drivers/nouveau/nouveau_buffer.c

/* Copy data to a scratch buffer and return address & bo the data resides in.
*/
uint64_t
nouveau_scratch_data(struct nouveau_context *nv,
                     const void *data, unsigned base, unsigned size,
                     struct nouveau_bo **bo)
{
   unsigned bgn = MAX2(base, nv->scratch.offset);
   unsigned end = bgn + size;

   if (end >= nv->scratch.end) {
      end = base + size;
      if (!nouveau_scratch_more(nv, end))
         return 0;
      bgn = base;
   }
   nv->scratch.offset = align(end, 4);

   memcpy(nv->scratch.map + bgn, (const uint8_t *)data + base, size);

   *bo = nv->scratch.current;
   return (*bo)->offset + (bgn - base);
}


(gdb) print nv->scratch
$2 = {map = 0x7f3f25a9c000 <error: Cannot access memory at address
0x7f3f25a9c000>, id = 1, wrap = 1, offset = 177264, end = 2097152, bo = {0x0,
0x55eb433792e0, 0x0, 0x0}, current = 0x55eb433792e0, 
  runout = 0x0, bo_size = 2097152}


The same 0x7f3f25a9c000 pointer value is also found in bo->map and
nv->scratch.current.map

(gdb) print bo->map
$6 = (void *) 0x7f3f25a9c000

(gdb) print nv->scratch.current.map
$9 = (void *) 0x7f3f25a9c000

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are the QA Contact for the bug.
_______________________________________________
Nouveau mailing list
Nouveau@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/nouveau

Reply via email to