enable VBOs with secondlife then app will crash when rendering stuff

bt:
==

#0  0x00007ffff0672f25 in raise () from /lib/libc.so.6
#1  0x00007ffff0675d60 in abort () from /lib/libc.so.6
#2  0x00007ffff066c04a in __assert_fail () from /lib/libc.so.6
#3  0x00007fffe2d0cf4b in migrate_image_to_miptree (ctx=<value optimized out>, texObj=0x5631a00)
    at radeon_mipmap_tree.c:422
#4  radeon_validate_texture_miptree (ctx=<value optimized out>, texObj=0x5631a00)
    at radeon_mipmap_tree.c:585
#5  0x00007fffe2d038ce in r600_validate_texture (ctx=0x40d0150) at r600_texstate.c:726
#6  r600ValidateBuffers (ctx=0x40d0150) at r600_texstate.c:772
#7  0x00007fffe2d00820 in r700TryDrawPrims (ctx=0x40d0150, arrays=0x40c1aa8, prim=0x7fffffffd160,
    nr_prims=1, ib=0x7fffffffd140, index_bounds_valid=<value optimized out>, min_index=0, max_index=288)
    at r700_render.c:879
#8  r700DrawPrims (ctx=0x40d0150, arrays=0x40c1aa8, prim=0x7fffffffd160, nr_prims=1, ib=0x7fffffffd140,
    index_bounds_valid=<value optimized out>, min_index=0, max_index=288) at r700_render.c:966
#9  0x00007fffe2da0aa6 in vbo_validated_drawrangeelements (ctx=0x40d0150, mode=4,
    index_bounds_valid=1 '\001', start=0, end=288, count=1536, type=5123, indices=0x0, basevertex=0)
    at vbo/vbo_exec_array.c:662
#10 0x00007fffe2da0d0f in vbo_exec_DrawRangeElementsBaseVertex (mode=4, start=0, end=288, count=1536,
    type=5123, indices=0x0, basevertex=0) at vbo/vbo_exec_array.c:758
#11 0x00007fffe2da0db0 in vbo_exec_DrawRangeElements (mode=4760, start=4760, end=6, count=-1,
    type=142879792, indices=0x67616d69203d3d20) at vbo/vbo_exec_array.c:775
#12 0x0000000001920829 in LLVertexBuffer::drawRange(unsigned int, unsigned int, unsigned int, unsigned int, unsigned int) const ()
#13 0x00000000006b027e in LLRenderPass::pushBatch(LLDrawInfo&, unsigned int, int) ()
#14 0x00000000006acb23 in LLRenderPass::pushBatches(unsigned int, unsigned int, int) ()
#15 0x00000000006bd970 in LLDrawPoolSimple::render(int) ()
#16 0x0000000001689f95 in LLPipeline::renderGeom(LLCamera&, int) ()
#17 0x000000000128fd22 in display(int, float, int, int) ()
#18 0x00000000005b8201 in LLAppViewer::mainLoop() ()
#19 0x0000000001720a59 in main ()

full bt
====

#3  0x00007fffe2d0cf4b in migrate_image_to_miptree (ctx=<value optimized out>, texObj=0x5631a00)
    at radeon_mipmap_tree.c:422
        dest = 0x170000010d <Address 0x170000010d out of bounds>
        __PRETTY_FUNCTION__ = "migrate_image_to_miptree"
#4  radeon_validate_texture_miptree (ctx=<value optimized out>, texObj=0x5631a00)
    at radeon_mipmap_tree.c:585
        dst_miptree = 0x7f6f53a
        faces = 1
        face = 0
        level = 0
        img = 0x6532110
        __func__ = "radeon_validate_texture_miptree"
#5  0x00007fffe2d038ce in r600_validate_texture (ctx=0x40d0150) at r600_texstate.c:726
No locals.
#6  r600ValidateBuffers (ctx=0x40d0150) at r600_texstate.c:772
        t = <value optimized out>
        rmesa = 0x4017930
        rrb = 0x0
        i = 0
        ret = <value optimized out>
#7  0x00007fffe2d00820 in r700TryDrawPrims (ctx=0x40d0150, arrays=0x40c1aa8, prim=0x7fffffffd160,
    nr_prims=1, ib=0x7fffffffd140, index_bounds_valid=<value optimized out>, min_index=0, max_index=288)
    at r700_render.c:879
        __func__ = "r700TryDrawPrims"
        __warn_once = 1
#8  r700DrawPrims (ctx=0x40d0150, arrays=0x40c1aa8, prim=0x7fffffffd160, nr_prims=1, ib=0x7fffffffd140,
    index_bounds_valid=<value optimized out>, min_index=0, max_index=288) at r700_render.c:966
No locals.
#9  0x00007fffe2da0aa6 in vbo_validated_drawrangeelements (ctx=0x40d0150, mode=4,
    index_bounds_valid=1 '\001', start=0, end=288, count=1536, type=5123, indices=0x0, basevertex=0)
    at vbo/vbo_exec_array.c:662
        ib = {count = 1536, type = 5123, obj = 0x891adc0, ptr = 0x0}
        prim = {{mode = 4, indexed = 1, begin = 1, end = 1, weak = 0, pad = 0, start = 0, count = 1536,
            basevertex = 0}}
#10 0x00007fffe2da0d0f in vbo_exec_DrawRangeElementsBaseVertex (mode=4, start=0, end=288, count=1536,
    type=5123, indices=0x0, basevertex=0) at vbo/vbo_exec_array.c:758
        ctx = 0x40d0150
        warnCount = 0
#11 0x00007fffe2da0db0 in vbo_exec_DrawRangeElements (mode=4760, start=4760, end=6, count=-1,
    type=142879792, indices=0x67616d69203d3d20) at vbo/vbo_exec_array.c:775
No locals.
...