When run mesa demo drawpix, it exists with assertion failure:
drawpix: i915_vtbl.c:448: i915_do_emit_state: Assertion `(state->Program[0] & 0x1ff) + 2 == state->ProgramSize' failed.

I use the tip of Mesa & Drm. Mesa 7.0.2 has no this bug.

Below is the backtrace info:
#0  0xffffe410 in __kernel_vsyscall ()
#1  0x009d1159 in raise () from /lib/libc.so.6
#2  0x009d26e3 in abort () from /lib/libc.so.6
#3  0x009caabd in __assert_fail () from /lib/libc.so.6
#4  0xb7ac53ce in i915_do_emit_state (intel=0x805ac08) at i915_vtbl.c:448
#5  0xb7ac548a in i915_emit_state (intel=0x805ac08) at i915_vtbl.c:464
#6  0xb7ab5b1a in intelDrawPixels (ctx=0x805ac08, x=20, y=20, width=194, 
    height=188, format=6407, type=5121, unpack=0x806689c, pixels=0x832a620)
    at intel_pixel_draw.c:68
#7  0xb7bfce0c in _mesa_DrawPixels (width=194, height=188, format=6407, 
    type=5121, pixels=0x832a620) at main/drawpix.c:186
#8  0xb7ec1e12 in glDrawPixels (width=194, height=188, format=6407, type=5121, 
    pixels=0x832a620) at ../../../src/mesa/glapi/glapitemp.h:1370
#9  0x08049601 in Display () at drawpix.c:69
#10 0xb7f6b53f in processWindowWorkList (window=0x8051af0) at glut_event.c:1306
#11 0xb7f6c012 in glutMainLoop () at glut_event.c:1353
#12 0x080494dc in main (argc=Cannot access memory at address 0x3bd9
) at drawpix.c:356