X.Org X Server 1.15.0 crashed after suspend with nouveau driver

[KDEUSER56]

I suspended Ubuntu 14.04 and after waking up from suspend, there was a complete freeze, I could not do anything, not even switching to a virtual terminal. Mouse input worked in the beginning but after a few seconds nothing worked anymore.
I suspended with "sudo pm-suspend".
I am using the nouveau driver.
I am using latest Ubuntu 14.04 daily as of today.

After hard reset I found the attached file in /var/crash.

Running apport-retrace gives me:

--- stack trace ---
#0 0x00007f8a33e5ef79 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
        resultvar = 0
        pid = 1170
        selftid = 1170
#1 0x00007f8a33e62388 in __GI_abort () at abort.c:89
        save_stage = 2
        act = {__sigaction_handler = {sa_handler = 0xd14, sa_sigaction = 0xd14}, sa_mask = {__val = {0, 140737290327736, 140231589197143, 1, 0, 0, 140231552724264, 1, 140737290327736, 3348, 140231589225749, 0, 18446744073709551615, 140231595835104, 140737290327520, 0}}, sa_flags = 924665264, sa_restorer = 0x7f8a362e59c0}
        sigs = {__val = {32, 0 <repeats 15 times>}}
#2 0x00007f8a364bba1e in OsAbort () at ../../os/utils.c:1324
No locals.
#3 0x00007f8a363a25a7 in ddxGiveUp (error=error@entry=EXIT_ERR_ABORT) at ../../../../hw/xfree86/common/xf86Init.c:1112
        i = <optimized out>
#4 0x00007f8a363a2666 in AbortDDX (error=error@entry=EXIT_ERR_ABORT) at ../../../../hw/xfree86/common/xf86Init.c:1156
        i = <optimized out>
#5 0x00007f8a364c0eb2 in AbortServer () at ../../os/log.c:770
No locals.
#6 0x00007f8a364c1bb8 in FatalError (f=f@entry=0x7f8a364ec388 "Caught signal %d (%s). Server aborting\n") at ../../os/log.c:911
        args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7ffff43257a0, reg_save_area = 0x7ffff43256d0}}
        args2 = {{gp_offset = 8, fp_offset = 48, overflow_arg_area = 0x7ffff43257a0, reg_save_area = 0x7ffff43256d0}}
        beenhere = 1
#7 0x00007f8a364b978c in OsSigHandler (signo=11, sip=<optimized out>, unused=<optimized out>) at ../../os/osinit.c:147
        unused = <optimized out>
        sip = <optimized out>
        signo = 11
#8 <signal handler called>
No locals.
#9 __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:33
No locals.
#10 0x00007f8a2f151356 in memcpy (__len=3348, __src=0x0, __dest=<optimized out>) at /usr/include/x86_64-linux-gnu/bits/string3.h:51
No locals.
#11 exaMemcpyBox (pbox=pbox@entry=0x7ffff4325dd0, src=0x0, src_pitch=3392, dst=<optimized out>, dst_pitch=3348, pPixmap=0x7f8a37af53f0) at ../../exa/exa_migration_classic.c:59
        i = 646
        cpp = <optimized out>
        bytes = 3348
#12 0x00007f8a2f1517fb in exaCopyDirty (migrate=migrate@entry=0x7ffff4325e30, pValidDst=0x7f8a37af5490, pValidSrc=0x7f8a37af54a0, transfer=0x7f8a2ffb0e60 <nouveau_exa_download_from_screen>, fallback_index=fallback_index@entry=1, sync=0x7f8a2f150350 <exaWaitSync>) at ../../exa/exa_migration_classic.c:240
        pPixmap = 0x7f8a37af53f0
        damage = <optimized out>
        CopyReg = {extents = {x1 = 0, y1 = 0, x2 = 837, y2 = 646}, data = 0x0}
        save_use_gpu_copy = 1
        save_pitch = 3392
        pBox = 0x7ffff4325dd0
        nbox = 0
        access_prepared = 1
        need_sync = 0
#13 0x00007f8a2f151a22 in exaCopyDirtyToSys (migrate=migrate@entry=0x7ffff4325e30) at ../../exa/exa_migration_classic.c:285
        pPixmap = <optimized out>
#14 0x00007f8a2f153e22 in exaPrepareAccessReg_mixed (pPixmap=0x7f8a37af53f0, index=<optimized out>, pReg=0x7ffff4325ee0) at ../../exa/exa_migration_mixed.c:256
        as_dst = 1
        pixmaps = {{as_dst = 0, as_src = 1, pPix = 0x7f8a37af53f0, pReg = 0x0}}
        has_gpu_copy = <optimized out>
        success = <optimized out>
#15 0x00007f8a2f15c500 in ExaCheckCopyNtoN (pSrc=0x7f8a3756a4c0, pDst=0x7f8a37f6d350, pGC=0x7f8a37d004d0, pbox=0x7ffff4326040, nbox=1, dx=-928, dy=-151, reverse=0, upsidedown=0, bitplane=0, closure=0x0) at ../../exa/exa_unaccel.c:152
        pPixmap = 0x7f8a37af53f0
        reg = {extents = {x1 = 335, y1 = 53, x2 = 387, y2 = 77}, data = 0x0}
        xoff = -926
        yoff = -128
#16 0x00007f8a36495ead in miCopyRegion (pSrcDrawable=pSrcDrawable@entry=0x7f8a3756a4c0, pDstDrawable=pDstDrawable@entry=0x7f8a37f6d350, pGC=pGC@entry=0x7f8a37d004d0, pDstRegion=pDstRegion@entry=0x7ffff4326040, dx=dx@entry=-928, dy=dy@entry=-151, copyProc=copyProc@entry=0x7f8a2f155bc0 <exaCopyNtoN>, bitPlane=bitPlane@entry=0, closure=closure@entry=0x0) at ../../mi/micopy.c:121
        careful = <optimized out>
        reverse = <optimized out>
        upsidedown = <optimized out>
        pbox = 0x7ffff4326040
        pboxNew1 = <optimized out>
        pboxNew2 = 0x0
        pboxBase = <optimized out>
        pboxNext = <optimized out>
        pboxTmp = <optimized out>
#17 0x00007f8a36496436 in miDoCopy (pSrcDrawable=0x7f8a3756a4c0, pDstDrawable=0x7f8a37f6d350, pGC=0x7f8a37d004d0, xIn=333, yIn=30, widthSrc=52, heightSrc=heightSrc@entry=24, xOut=1261, xOut@entry=0, yOut=181, yOut@entry=0, copyProc=copyProc@entry=0x7f8a2f155bc0 <exaCopyNtoN>, bitPlane=bitPlane@entry=0, closure=closure@entry=0x0) at ../../mi/micopy.c:297
        prgnSrcClip = 0x0
        freeSrcClip = 0
        prgnExposed = 0x0
        rgnDst = {extents = {x1 = 1261, y1 = 181, x2 = 1313, y2 = 205}, data = 0x0}
        dx = -928
        dy = -151
        box_x1 = <optimized out>
        box_y1 = <optimized out>
        box_x2 = <optimized out>
        box_y2 = <optimized out>
        fastSrc = <optimized out>
        fastDst = <optimized out>
        fastExpose = <optimized out>
#18 0x00007f8a2f154326 in exaCopyArea (pSrcDrawable=<optimized out>, pDstDrawable=<optimized out>, pGC=<optimized out>, srcx=<optimized out>, srcy=<optimized out>, width=<optimized out>, height=24, dstx=0, dsty=0) at ../../exa/exa_accel.c:608
        dsty = 0
        srcx = <optimized out>
        pSrcDrawable = <optimized out>
        dstx = 0
        height = 24
        width = <optimized out>
        srcy = <optimized out>
        pGC = <optimized out>
        pDstDrawable = <optimized out>
#19 0x00007f8a36442ea8 in damageCopyArea (pSrc=0x7f8a3756a4c0, pDst=0x7f8a37f6d350, pGC=0x7f8a37d004d0, srcx=333, srcy=<optimized out>, width=52, height=24, dstx=0, dsty=0) at ../../../miext/damage/damage.c:765
        ret = <optimized out>
        oldFuncs = 0x7f8a367436c0 <damageGCFuncs>
#20 0x00007f8a363fba9a in doShmPutImage (data=<optimized out>, dy=<optimized out>, dx=<optimized out>, sh=24, sw=52, sy=30, sx=333, h=619, w=<optimized out>, format=<optimized out>, depth=<optimized out>, pGC=<optimized out>, dst=0x7f8a37f6d350) at ../../Xext/shm.c:487
        pPixmap = 0x7f8a3756a4c0
#21 ProcShmPutImage (client=client@entry=0x7f8a37b315f0) at ../../Xext/shm.c:597
        pGC = 0x7f8a37d004d0
        pDraw = 0x7f8a37f6d350
        length = <optimized out>
        shmdesc = 0x7f8a37ce42d0
        stuff = 0x7f8a3871c554
#22 0x00007f8a363fd078 in ProcShmDispatch (client=0x7f8a37b315f0) at ../../Xext/shm.c:1297
        stuff = 0x7f8a3871c554
#23 0x00007f8a36362a9e in Dispatch () at ../../dix/dispatch.c:433
        clientReady = 0x7f8a374b4c40
        result = <optimized out>
        client = 0x7f8a37b315f0
        nready = 0
        icheck = 0x7f8a3674d9b0 <checkForInput>
        start_tick = 203445
#24 0x00007f8a3636690a in dix_main (argc=11, argv=0x7ffff43264c8, envp=<optimized out>) at ../../dix/main.c:294
        i = <optimized out>
        alwaysCheckForInput = {0, 1}
#25 0x00007f8a33e49ec5 in __libc_start_main (main=0x7f8a36351e50 <main>, argc=11, argv=0x7ffff43264c8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffff43264b8) at libc-start.c:287
        result = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0, -3311632117760555833, 140231591665237, 140737290331328, 0, 0, 3311641365766177991, 3251282182607570119}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x7f8a364c5510 <__libc_csu_init>, 0x7ffff43264c8}, data = {prev = 0x0, cleanup = 0x0, canceltype = 910972176}}}
        not_first_call = <optimized out>
#26 0x00007f8a36351e7e in _start ()

[KDEUSER56 (kdeuser56)]

Got a similar trace today after suspend, see the file attached.

[KDEUSER56 (kdeuser56)]

Apport dump of the mentioned crash today.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[penalvch (penalvch)]

KDEUSER56, thank you for reporting this and helping make Ubuntu better. However, your crash report is manually attached.

Please follow these instructions to have apport report a new bug about your crash that can be dealt with by the automatic retracer. First, execute at a terminal:
cd /var/crash && sudo rm * ; sudo apt-get update && sudo apt-get -y upgrade && sudo service apport start force_start=1

If you are running the Ubuntu Stable Release you might need to enable apport in /etc/default/apport and restart. Now reproduce the crash, then open a terminal, navigate to your /var/crash directory and file your report with:
sudo ubuntu-bug /var/crash/_my_crash_report.crash

where _my_crash_report.crash is the crash you would like to report. By default, this sends the crash to the Ubuntu Error Tracker infrastructure, which is different than Launchpad. For more on this, please see https://wiki.ubuntu.com/ErrorTracker .

However, if after doing this you would still like to have a crash report posted to Launchpad, for example to ease triage and add others to your report, one would need to open the following file via a terminal:
sudo nano /etc/apport/crashdb.conf

and comment out the line:
'problem_types': ['Bug', 'Package'],

by changing it to:
# 'problem_types': ['Bug', 'Package'],

Save, close, and try to file the crash report again via:
sudo ubuntu-bug /var/crash/_my_crash_report.crash

I'm closing this report since the process outlined above will deal with this issue more efficiently. Also, please do not attach your crash report manually to this report and reopen it. Thank you for your understanding.

Helpful bug reporting tips:
https://wiki.ubuntu.com/ReportingBugs