Comment # 29 on bug 91278 from Michel Dänzer

That is interesting, though; the radeonsi driver seems to think there should be
something mapped at the faulting address. This indicates that either the kernel
driver fails to handle the mapping properly, or maybe there's a problem with
communicating the buffer mapping information from userspace to the kernel
driver.