I previously thought it didn't crash with r600g/sb disabled but that's not the case. It also crash with R600_DEBUG=nosb.