Comment # 2 on bug 106928 from Roland Scheidegger

Definitely looks like a r600 issue, in the sb code (I suppose it would work
with R600_DEBUG=nosb).
An apitrace might be helpful (it should be possible to capture one with nosb so
it doesn't crash and then replaying it without that should crash).
Unless someone has some ideas what could be wrong with the sb code there...