System Environment:
--------------------------
Platform: ILK
Libdrm:		(master)libdrm-2.4.56-10-g22b995d8cbf1059535c5de5ba1869c1623ae5b08
Mesa:		(master)8d8a5eb792c662a8def7c9ab65d2df67972cf659
Xserver:	(master)xorg-server-1.15.99.902-121-g2f5cf9ff9a0f713b7e038636484c77f113a5f10a
Xf86_video_intel:(master)2.99.914-67-g12c051d5c673d79c16a3a1478c0977799484ca95
Libva:		(master)acfcd5f0637a951d50c5112c7dfbd46f1d0dcdb3
Libva_intel_driver:(master)f3f49f2f0e6b3669d9b09341a11cf0b96e138674
Kernel:   (drm-intel-nightly)257d90d13794c2eb545ab0d6c708f21e2a0378b6

Bug detailed description:
---------------------------
It crash on ILK with mesa master branch.works well on 10.3 branch.
Bisect shows:20a849b4aa63c7fce96b04de674a4c70f054ed9c is the first bad commit
commit 20a849b4aa63c7fce96b04de674a4c70f054ed9c
Author:     Matt Turner <mattst88@gmail.com>
AuthorDate: Sat Jul 12 21:18:39 2014 -0700
Commit:     Matt Turner <mattst88@gmail.com>
CommitDate: Fri Aug 22 10:23:34 2014 -0700

    i965: Use basic-block aware insertion/removal functions.

    To avoid invalidating and recreating the control flow graph. Also stop
    invalidating the CFG in places we didn't add or remove an instruction.

    cfg calculations:     202951 -> 80307 (-60.43%)

    Reviewed-by: Topi Pohjolainen <topi.pohjolainen@intel.com>

output:
dEQP Core GL-CTS-2.0 (0x0052484b) starting..
  target implementation = 'X11'

Test case 'ES2-CTS.gtf.GL2Tests.framebuffer_objects.framebuffer_objects'..
Segmentation fault (core dumped)

(gdb) bt
#0  fs_visitor::remove_duplicate_mrf_writes (this=this@entry=0x7fffffffc770) at brw_fs.cpp:2421
#1  0x00007ffff5e4d964 in fs_visitor::run (this=this@entry=0x7fffffffc770) at brw_fs.cpp:3263
#2  0x00007ffff5e4e155 in brw_wm_fs_emit (brw=brw@entry=0x7ffff56cb038, mem_ctx=mem_ctx@entry=0x16f8b98, key=key@entry=0x7fffffffd590,
    prog_data=prog_data@entry=0x7fffffffd410, fp=fp@entry=0x16ed0c0, prog=prog@entry=0x16ff818, final_assembly_size=final_assembly_size@entry=0x7fffffffd40c) at brw_fs.cpp:3400
#3  0x00007ffff5e9f025 in do_wm_prog (brw=0x7ffff56cb038, prog=0x16ff818, fp=0x16ed0c0, key=0x7fffffffd590) at brw_wm.c:183
#4  0x00007ffff5e4d6a5 in brw_fs_precompile (ctx=ctx@entry=0x7ffff56cb038, prog=prog@entry=0x16ff818) at brw_fs.cpp:3528
#5  0x00007ffff5e7d251 in brw_shader_precompile (prog=0x16ff818, ctx=0x7ffff56cb038) at brw_shader.cpp:73
#6  brw_link_shader (ctx=0x7ffff56cb038, shProg=0x16ff818) at brw_shader.cpp:269
#7  0x00007ffff5d31706 in _mesa_glsl_link_shader (ctx=0x7ffff56cb038, prog=0x16ff818) at ../../src/mesa/program/ir_to_mesa.cpp:3082
#8  0x00007ffff5c38b5a in link_program (ctx=0x7ffff56cb038, program=<optimized out>) at ../../src/mesa/main/shaderapi.c:915
#9  0x0000000000f6871d in glwLinkProgram ()
#10 0x0000000000827d9d in GTFBuildShader_2_0 ()
#11 0x0000000000ad53f8 in GTFGL2TestFramebufferObjectsApply ()
#12 0x0000000000aa5821 in GTFTestGL2TestApply ()
#13 0x0000000000866a39 in GTFTestEncapsulateApply ()
#14 0x0000000000812907 in GTFRunTest ()
#15 0x000000000080ae9b in gtf::TestCase::iterate() ()
#16 0x0000000000f00a97 in tcu::TestCaseWrapper::iterateTestCase(tcu::TestCase*) ()
#17 0x00000000007da1a1 in glcts::TestCaseWrapper::iterateTestCase(tcu::TestCase*) ()
#18 0x0000000000f02190 in tcu::TestExecutor::iterate() ()
#19 0x0000000000ef5141 in tcu::App::iterate() ()
#20 0x0000000000541638 in main ()


Reproduce steps:
-------------------------
1. xinit
2. ./glcts --deqp-case=ES2-CTS.gtf.GL2Tests.framebuffer_objects.framebuffer_objects