Created attachment 133709 [details] [review] hackpatch OK, so it looks like a PUSH_RESET happens when there's no bufctx is bound. I can definitely see how that can happen, unfortunately -- if a context becomes active and is then deleted, then the screen's pushbuf->user_priv = NULL. Then a PUSH_RESET comes in, and *boom*. This is a giant hack, but I suspect this patch could resolve the issue.