When R600_DEBUG=check_vm catches a VM fault, it generates a report in
~/ddebug_dumps/ , please attach that here.

A similar report from something like GALLIUM_DDEBUG="pipelined 10000" might
give more information.