Description of problem:

I was using Plasma 5.19.2 on Wayland in Fedora Rawhide with KF 5.71.0, Qt 5.14.2, Mesa 20.1.2. I started VLC 3.0.11 (from rpmfusion). I played an mp4 file for about 8 minutes. Plasma froze for a few minutes, and then sddm appeared. The systemd-coredump process for the kwin_wayland crash didn't complete correctly possibly due to timing out. I found the kwin_wayland core dump file in /var/lib/systemd/coredump/ kwin_wayland had a segmentation fault in thread 1 in std::__atomic_base<int>::operator++ at /usr/include/c++/10/bits/atomic_base.h:325 due to an invalid pointer this=0x7000700070006
Memory corruption might've resulted in the invalid pointer.

Core was generated by `/usr/bin/kwin_wayland --xwayland --libinput --exit-with-session=/usr/libexec/st'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  std::__atomic_base<int>::operator++ (this=0x7000700070006)
    at /usr/include/c++/10/bits/atomic_base.h:325

325           operator++() noexcept
[Current thread is 1 (Thread 0x7fdd0dea1e00 (LWP 12932))]

The trace involved kwayland-server-5.19.2-1.fc33. Functions related to the position of the mouse pointer were in parts of the trace of the crashing thread.

(gdb) thread apply all bt

Thread 21 (Thread 0x7fdcf9802680 (LWP 12933)):
#0  0x00007fdd0d69231f in __GI___poll (fds=0x7fdcf40184a0, nfds=4, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007fdd0b1ce1ce in g_main_context_poll (priority=<optimized out>, n_fds=4, fds=0x7fdcf40184a0, timeout=<optimized out>, context=0x7fdcf4001ce0) at ../glib/gmain.c:4346
#2  g_main_context_iterate (context=context@entry=0x7fdcf4001ce0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ../glib/gmain.c:4042
#3  0x00007fdd0b1ce303 in g_main_context_iteration (context=0x7fdcf4001ce0, may_block=may_block@entry=1) at ../glib/gmain.c:4108
#4  0x00007fdd0dc29b73 in QEventDispatcherGlib::processEvents (this=0x7fdcf4000b60, flags=...) at kernel/qeventdispatcher_glib.cpp:423
#5  0x00007fdd0dbdc91b in QEventLoop::exec (this=this@entry=0x7fdcf9801bb0, flags=..., flags@entry=...) at ../../include/QtCore/../../src/corelib/global/qflags.h:136
#6  0x00007fdd0da48427 in QThread::exec (this=<optimized out>) at ../../include/QtCore/../../src/corelib/global/qflags.h:118
#7  0x00007fdd0e65c51b in QDBusConnectionManager::run (this=0x7fdd0e6cb060 <(anonymous namespace)::Q_QGS__q_manager::innerFunction()::holder>) at qdbusconnection.cpp:179
#8  0x00007fdd0da49690 in QThreadPrivate::start(void*) () at thread/qthread_unix.cpp:342
#9  0x00007fdd0e6dc3f9 in start_thread (arg=0x7fdcf9802680) at pthread_create.c:462
#10 0x00007fdd0d69d3b3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 20 (Thread 0x7fdce1a97680 (LWP 12942)):
#0  futex_wait_cancelable (private=0, expected=0, futex_word=0x55d6e53d8738) at ../sysdeps/nptl/futex-internal.h:183
--Type <RET> for more, q to quit, c to continue without paging--c
#1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x55d6e53d86e8, cond=0x55d6e53d8710) at pthread_cond_wait.c:508
#2  __pthread_cond_wait (cond=0x55d6e53d8710, mutex=0x55d6e53d86e8) at pthread_cond_wait.c:638
#3  0x00007fdcf1c252ab in util_queue_thread_func () from /usr/lib64/dri/radeonsi_dri.so
#4  0x00007fdcf1c24d7b in impl_thrd_routine () from /usr/lib64/dri/radeonsi_dri.so
#5  0x00007fdd0e6dc3f9 in start_thread (arg=0x7fdce1a97680) at pthread_create.c:462
#6  0x00007fdd0d69d3b3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 19 (Thread 0x7fdc97fff680 (LWP 13004)):
#0  futex_wait_cancelable (private=0, expected=0, futex_word=0x7fdd0d473478) at ../sysdeps/nptl/futex-internal.h:183
#1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x7fdd0d473428, cond=0x7fdd0d473450) at pthread_cond_wait.c:508
#2  __pthread_cond_wait (cond=0x7fdd0d473450, mutex=0x7fdd0d473428) at pthread_cond_wait.c:638
#3  0x00007fdd0d37f01c in QTWTF::TCMalloc_PageHeap::scavengerThread() () from /lib64/libQt5Script.so.5
#4  0x00007fdd0d37f04f in QTWTF::TCMalloc_PageHeap::runScavengerThread(void*) () from /lib64/libQt5Script.so.5
#5  0x00007fdd0e6dc3f9 in start_thread (arg=0x7fdc97fff680) at pthread_create.c:462
#6  0x00007fdd0d69d3b3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 18 (Thread 0x7fdcd1ffb680 (LWP 14500)):
#0  0x00007fdd0d69231f in __GI___poll (fds=0x7fdcb000f2d0, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007fdd0b1ce1ce in g_main_context_poll (priority=<optimized out>, n_fds=1, fds=0x7fdcb000f2d0, timeout=<optimized out>, context=0x7fdcb000a3c0) at ../glib/gmain.c:4346
#2  g_main_context_iterate (context=context@entry=0x7fdcb000a3c0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ../glib/gmain.c:4042
#3  0x00007fdd0b1ce303 in g_main_context_iteration (context=0x7fdcb000a3c0, may_block=may_block@entry=1) at ../glib/gmain.c:4108
#4  0x00007fdd0dc29b73 in QEventDispatcherGlib::processEvents (this=0x7fdcb000ee60, flags=...) at kernel/qeventdispatcher_glib.cpp:423
#5  0x00007fdd0dbdc91b in QEventLoop::exec (this=this@entry=0x7fdcd1ffabe0, flags=..., flags@entry=...) at ../../include/QtCore/../../src/corelib/global/qflags.h:136
#6  0x00007fdd0da48427 in QThread::exec (this=this@entry=0x55d6e63dd700) at ../../include/QtCore/../../src/corelib/global/qflags.h:118
#7  0x00007fdd0c72b7a9 in QQmlThreadPrivate::run (this=0x55d6e63dd700) at qml/ftw/qqmlthread.cpp:155
#8  0x00007fdd0da49690 in QThreadPrivate::start(void*) () at thread/qthread_unix.cpp:342
#9  0x00007fdd0e6dc3f9 in start_thread (arg=0x7fdcd1ffb680) at pthread_create.c:462
#10 0x00007fdd0d69d3b3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 17 (Thread 0x7fdce329a680 (LWP 12939)):
#0  futex_wait_cancelable (private=0, expected=0, futex_word=0x55d6e53d8738) at ../sysdeps/nptl/futex-internal.h:183
#1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x55d6e53d86e8, cond=0x55d6e53d8710) at pthread_cond_wait.c:508
#2  __pthread_cond_wait (cond=0x55d6e53d8710, mutex=0x55d6e53d86e8) at pthread_cond_wait.c:638
#3  0x00007fdcf1c252ab in util_queue_thread_func () from /usr/lib64/dri/radeonsi_dri.so
#4  0x00007fdcf1c24d7b in impl_thrd_routine () from /usr/lib64/dri/radeonsi_dri.so
#5  0x00007fdd0e6dc3f9 in start_thread (arg=0x7fdce329a680) at pthread_create.c:462
#6  0x00007fdd0d69d3b3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 16 (Thread 0x7fdcd2ffd680 (LWP 12947)):
#0  futex_wait_cancelable (private=0, expected=0, futex_word=0x55d6e53d9bec) at ../sysdeps/nptl/futex-internal.h:183
#1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x55d6e53d9b98, cond=0x55d6e53d9bc0) at pthread_cond_wait.c:508
#2  __pthread_cond_wait (cond=0x55d6e53d9bc0, mutex=0x55d6e53d9b98) at pthread_cond_wait.c:638
#3  0x00007fdcf1c252ab in util_queue_thread_func () from /usr/lib64/dri/radeonsi_dri.so
#4  0x00007fdcf1c24d7b in impl_thrd_routine () from /usr/lib64/dri/radeonsi_dri.so
#5  0x00007fdd0e6dc3f9 in start_thread (arg=0x7fdcd2ffd680) at pthread_create.c:462
#6  0x00007fdd0d69d3b3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 15 (Thread 0x7fdcd3fff680 (LWP 12945)):
#0  futex_wait_cancelable (private=0, expected=0, futex_word=0x55d6e53d94e4) at ../sysdeps/nptl/futex-internal.h:183
#1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x55d6e53d9490, cond=0x55d6e53d94b8) at pthread_cond_wait.c:508
#2  __pthread_cond_wait (cond=0x55d6e53d94b8, mutex=0x55d6e53d9490) at pthread_cond_wait.c:638
#3  0x00007fdcf1c252ab in util_queue_thread_func () from /usr/lib64/dri/radeonsi_dri.so
#4  0x00007fdcf1c24d7b in impl_thrd_routine () from /usr/lib64/dri/radeonsi_dri.so
#5  0x00007fdd0e6dc3f9 in start_thread (arg=0x7fdcd3fff680) at pthread_create.c:462
#6  0x00007fdd0d69d3b3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 14 (Thread 0x7fdcd37fe680 (LWP 12946)):
#0  futex_wait_cancelable (private=0, expected=0, futex_word=0x55d6e53d9bec) at ../sysdeps/nptl/futex-internal.h:183
#1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x55d6e53d9b98, cond=0x55d6e53d9bc0) at pthread_cond_wait.c:508
#2  __pthread_cond_wait (cond=0x55d6e53d9bc0, mutex=0x55d6e53d9b98) at pthread_cond_wait.c:638
#3  0x00007fdcf1c252ab in util_queue_thread_func () from /usr/lib64/dri/radeonsi_dri.so
#4  0x00007fdcf1c24d7b in impl_thrd_routine () from /usr/lib64/dri/radeonsi_dri.so
#5  0x00007fdd0e6dc3f9 in start_thread (arg=0x7fdcd37fe680) at pthread_create.c:462
#6  0x00007fdd0d69d3b3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 13 (Thread 0x7fdcd27fc680 (LWP 12948)):
#0  futex_wait_cancelable (private=0, expected=0, futex_word=0x55d6e548acf0) at ../sysdeps/nptl/futex-internal.h:183
#1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x55d6e548aca0, cond=0x55d6e548acc8) at pthread_cond_wait.c:508
#2  __pthread_cond_wait (cond=0x55d6e548acc8, mutex=0x55d6e548aca0) at pthread_cond_wait.c:638
#3  0x00007fdcf1c252ab in util_queue_thread_func () from /usr/lib64/dri/radeonsi_dri.so
#4  0x00007fdcf1c24d7b in impl_thrd_routine () from /usr/lib64/dri/radeonsi_dri.so
#5  0x00007fdd0e6dc3f9 in start_thread (arg=0x7fdcd27fc680) at pthread_create.c:462
#6  0x00007fdd0d69d3b3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 12 (Thread 0x7fdcabfff680 (LWP 13001)):
#0  0x00007fdd0d69231f in __GI___poll (fds=0x7fdca0004630, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007fdd0b1ce1ce in g_main_context_poll (priority=<optimized out>, n_fds=1, fds=0x7fdca0004630, timeout=<optimized out>, context=0x7fdca0000c20) at ../glib/gmain.c:4346
#2  g_main_context_iterate (context=context@entry=0x7fdca0000c20, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ../glib/gmain.c:4042
#3  0x00007fdd0b1ce303 in g_main_context_iteration (context=0x7fdca0000c20, may_block=may_block@entry=1) at ../glib/gmain.c:4108
#4  0x00007fdd0dc29b73 in QEventDispatcherGlib::processEvents (this=0x7fdca0000b60, flags=...) at kernel/qeventdispatcher_glib.cpp:423
#5  0x00007fdd0dbdc91b in QEventLoop::exec (this=this@entry=0x7fdcabffebe0, flags=..., flags@entry=...) at ../../include/QtCore/../../src/corelib/global/qflags.h:136
#6  0x00007fdd0da48427 in QThread::exec (this=this@entry=0x55d6e5b68d50) at ../../include/QtCore/../../src/corelib/global/qflags.h:118
#7  0x00007fdd0c72b7a9 in QQmlThreadPrivate::run (this=0x55d6e5b68d50) at qml/ftw/qqmlthread.cpp:155
#8  0x00007fdd0da49690 in QThreadPrivate::start(void*) () at thread/qthread_unix.cpp:342
#9  0x00007fdd0e6dc3f9 in start_thread (arg=0x7fdcabfff680) at pthread_create.c:462
#10 0x00007fdd0d69d3b3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 11 (Thread 0x7fdca8f89680 (LWP 14499)):
#0  futex_wait_cancelable (private=0, expected=0, futex_word=0x55d6e63fd1f0) at ../sysdeps/nptl/futex-internal.h:183
#1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x55d6e63fd1a0, cond=0x55d6e63fd1c8) at pthread_cond_wait.c:508
#2  __pthread_cond_wait (cond=0x55d6e63fd1c8, mutex=0x55d6e63fd1a0) at pthread_cond_wait.c:638
#3  0x00007fdcf1c252ab in util_queue_thread_func () from /usr/lib64/dri/radeonsi_dri.so
#4  0x00007fdcf1c24d7b in impl_thrd_routine () from /usr/lib64/dri/radeonsi_dri.so
#5  0x00007fdd0e6dc3f9 in start_thread (arg=0x7fdca8f89680) at pthread_create.c:462
#6  0x00007fdd0d69d3b3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 10 (Thread 0x7fdcf1772680 (LWP 12938)):
#0  futex_wait_cancelable (private=0, expected=0, futex_word=0x55d6e53d5358) at ../sysdeps/nptl/futex-internal.h:183
#1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x55d6e53d5308, cond=0x55d6e53d5330) at pthread_cond_wait.c:508
#2  __pthread_cond_wait (cond=0x55d6e53d5330, mutex=0x55d6e53d5308) at pthread_cond_wait.c:638
#3  0x00007fdcf1c252ab in util_queue_thread_func () from /usr/lib64/dri/radeonsi_dri.so
#4  0x00007fdcf1c24d7b in impl_thrd_routine () from /usr/lib64/dri/radeonsi_dri.so
#5  0x00007fdd0e6dc3f9 in start_thread (arg=0x7fdcf1772680) at pthread_create.c:462
#6  0x00007fdd0d69d3b3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 9 (Thread 0x7fdcf3fff680 (LWP 12935)):
#0  0x00007fdd0d69231f in __GI___poll (fds=0x7fdce8004630, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007fdd0b1ce1ce in g_main_context_poll (priority=<optimized out>, n_fds=2, fds=0x7fdce8004630, timeout=<optimized out>, context=0x7fdce8000c20) at ../glib/gmain.c:4346
#2  g_main_context_iterate (context=context@entry=0x7fdce8000c20, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ../glib/gmain.c:4042
#3  0x00007fdd0b1ce303 in g_main_context_iteration (context=0x7fdce8000c20, may_block=may_block@entry=1) at ../glib/gmain.c:4108
#4  0x00007fdd0dc29b73 in QEventDispatcherGlib::processEvents (this=0x7fdce8000b60, flags=...) at kernel/qeventdispatcher_glib.cpp:423
#5  0x00007fdd0dbdc91b in QEventLoop::exec (this=this@entry=0x7fdcf3ffec00, flags=..., flags@entry=...) at ../../include/QtCore/../../src/corelib/global/qflags.h:136
#6  0x00007fdd0da48427 in QThread::exec (this=<optimized out>) at ../../include/QtCore/../../src/corelib/global/qflags.h:118
#7  0x00007fdd0da49690 in QThreadPrivate::start(void*) () at thread/qthread_unix.cpp:342
#8  0x00007fdd0e6dc3f9 in start_thread (arg=0x7fdcf3fff680) at pthread_create.c:462
#9  0x00007fdd0d69d3b3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 8 (Thread 0x7fdca978a680 (LWP 13002)):
#0  futex_wait_cancelable (private=0, expected=0, futex_word=0x55d6e5bae3a0) at ../sysdeps/nptl/futex-internal.h:183
#1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x55d6e5bae350, cond=0x55d6e5bae378) at pthread_cond_wait.c:508
#2  __pthread_cond_wait (cond=cond@entry=0x55d6e5bae378, mutex=mutex@entry=0x55d6e5bae350) at pthread_cond_wait.c:638
#3  0x00007fdd0da4edab in QWaitConditionPrivate::wait (deadline=..., deadline=..., this=0x55d6e5bae350) at thread/qwaitcondition_unix.cpp:146
#4  QWaitCondition::wait (this=<optimized out>, mutex=0x55d6e5bae1b8, deadline=...) at thread/qwaitcondition_unix.cpp:225
#5  0x00007fdcaae77a63 in FileInfoThread::run (this=0x55d6e5bae1a8) at fileinfothread.cpp:231
#6  0x00007fdd0da49690 in QThreadPrivate::start(void*) () at thread/qthread_unix.cpp:342
#7  0x00007fdd0e6dc3f9 in start_thread (arg=0x7fdca978a680) at pthread_create.c:462
#8  0x00007fdd0d69d3b3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 7 (Thread 0x7fdce0a95680 (LWP 12944)):
#0  futex_wait_cancelable (private=0, expected=0, futex_word=0x55d6e53d94e4) at ../sysdeps/nptl/futex-internal.h:183
#1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x55d6e53d9490, cond=0x55d6e53d94b8) at pthread_cond_wait.c:508
#2  __pthread_cond_wait (cond=0x55d6e53d94b8, mutex=0x55d6e53d9490) at pthread_cond_wait.c:638
#3  0x00007fdcf1c252ab in util_queue_thread_func () from /usr/lib64/dri/radeonsi_dri.so
#4  0x00007fdcf1c24d7b in impl_thrd_routine () from /usr/lib64/dri/radeonsi_dri.so
#5  0x00007fdd0e6dc3f9 in start_thread (arg=0x7fdce0a95680) at pthread_create.c:462
#6  0x00007fdd0d69d3b3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 6 (Thread 0x7fdce2298680 (LWP 12941)):
#0  futex_wait_cancelable (private=0, expected=0, futex_word=0x55d6e53d8738) at ../sysdeps/nptl/futex-internal.h:183
#1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x55d6e53d86e8, cond=0x55d6e53d8710) at pthread_cond_wait.c:508
#2  __pthread_cond_wait (cond=0x55d6e53d8710, mutex=0x55d6e53d86e8) at pthread_cond_wait.c:638
#3  0x00007fdcf1c252ab in util_queue_thread_func () from /usr/lib64/dri/radeonsi_dri.so
#4  0x00007fdcf1c24d7b in impl_thrd_routine () from /usr/lib64/dri/radeonsi_dri.so
#5  0x00007fdd0e6dc3f9 in start_thread (arg=0x7fdce2298680) at pthread_create.c:462
#6  0x00007fdd0d69d3b3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 5 (Thread 0x7fdcd17fa680 (LWP 12993)):
#0  0x00007fdd0d69231f in __GI___poll (fds=0x7fdca4004e60, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007fdd0b1ce1ce in g_main_context_poll (priority=<optimized out>, n_fds=1, fds=0x7fdca4004e60, timeout=<optimized out>, context=0x7fdca4000c20) at ../glib/gmain.c:4346
#2  g_main_context_iterate (context=context@entry=0x7fdca4000c20, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ../glib/gmain.c:4042
#3  0x00007fdd0b1ce303 in g_main_context_iteration (context=0x7fdca4000c20, may_block=may_block@entry=1) at ../glib/gmain.c:4108
#4  0x00007fdd0dc29b73 in QEventDispatcherGlib::processEvents (this=0x7fdca4000b60, flags=...) at kernel/qeventdispatcher_glib.cpp:423
#5  0x00007fdd0dbdc91b in QEventLoop::exec (this=this@entry=0x7fdcd17f9be0, flags=..., flags@entry=...) at ../../include/QtCore/../../src/corelib/global/qflags.h:136
#6  0x00007fdd0da48427 in QThread::exec (this=this@entry=0x55d6e5add700) at ../../include/QtCore/../../src/corelib/global/qflags.h:118
#7  0x00007fdd0c72b7a9 in QQmlThreadPrivate::run (this=0x55d6e5add700) at qml/ftw/qqmlthread.cpp:155
#8  0x00007fdd0da49690 in QThreadPrivate::start(void*) () at thread/qthread_unix.cpp:342
#9  0x00007fdd0e6dc3f9 in start_thread (arg=0x7fdcd17fa680) at pthread_create.c:462
#10 0x00007fdd0d69d3b3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 4 (Thread 0x7fdce2a99680 (LWP 12940)):
#0  futex_wait_cancelable (private=0, expected=0, futex_word=0x55d6e53d8738) at ../sysdeps/nptl/futex-internal.h:183
#1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x55d6e53d86e8, cond=0x55d6e53d8710) at pthread_cond_wait.c:508
#2  __pthread_cond_wait (cond=0x55d6e53d8710, mutex=0x55d6e53d86e8) at pthread_cond_wait.c:638
#3  0x00007fdcf1c252ab in util_queue_thread_func () from /usr/lib64/dri/radeonsi_dri.so
#4  0x00007fdcf1c24d7b in impl_thrd_routine () from /usr/lib64/dri/radeonsi_dri.so
#5  0x00007fdd0e6dc3f9 in start_thread (arg=0x7fdce2a99680) at pthread_create.c:462
#6  0x00007fdd0d69d3b3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 3 (Thread 0x7fdce1296680 (LWP 12943)):
#0  futex_wait_cancelable (private=0, expected=0, futex_word=0x55d6e53d94e4) at ../sysdeps/nptl/futex-internal.h:183
#1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x55d6e53d9490, cond=0x55d6e53d94b8) at pthread_cond_wait.c:508
#2  __pthread_cond_wait (cond=0x55d6e53d94b8, mutex=0x55d6e53d9490) at pthread_cond_wait.c:638
#3  0x00007fdcf1c252ab in util_queue_thread_func () from /usr/lib64/dri/radeonsi_dri.so
#4  0x00007fdcf1c24d7b in impl_thrd_routine () from /usr/lib64/dri/radeonsi_dri.so
#5  0x00007fdd0e6dc3f9 in start_thread (arg=0x7fdce1296680) at pthread_create.c:462
#6  0x00007fdd0d69d3b3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 2 (Thread 0x7fdcf8f52680 (LWP 12934)):
#0  0x00007fdd0d69231f in __GI___poll (fds=0x7fdcec005240, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007fdd0b1ce1ce in g_main_context_poll (priority=<optimized out>, n_fds=2, fds=0x7fdcec005240, timeout=<optimized out>, context=0x7fdcec000c20) at ../glib/gmain.c:4346
#2  g_main_context_iterate (context=context@entry=0x7fdcec000c20, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ../glib/gmain.c:4042
#3  0x00007fdd0b1ce303 in g_main_context_iteration (context=0x7fdcec000c20, may_block=may_block@entry=1) at ../glib/gmain.c:4108
#4  0x00007fdd0dc29b73 in QEventDispatcherGlib::processEvents (this=0x7fdcec000b60, flags=...) at kernel/qeventdispatcher_glib.cpp:423
#5  0x00007fdd0dbdc91b in QEventLoop::exec (this=this@entry=0x7fdcf8f51c00, flags=..., flags@entry=...) at ../../include/QtCore/../../src/corelib/global/qflags.h:136
#6  0x00007fdd0da48427 in QThread::exec (this=<optimized out>) at ../../include/QtCore/../../src/corelib/global/qflags.h:118
#7  0x00007fdd0da49690 in QThreadPrivate::start(void*) () at thread/qthread_unix.cpp:342
#8  0x00007fdd0e6dc3f9 in start_thread (arg=0x7fdcf8f52680) at pthread_create.c:462
#9  0x00007fdd0d69d3b3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 1 (Thread 0x7fdd0dea1e00 (LWP 12932)):
#0  std::__atomic_base<int>::operator++ (this=0x7000700070006) at /usr/include/c++/10/bits/atomic_base.h:325
#1  QAtomicOps<int>::ref<int> (_q_value=...) at ../../include/QtCore/../../src/corelib/thread/qatomic_cxx11.h:283
#2  QBasicAtomicInteger<int>::ref (this=0x7000700070006) at ../../include/QtCore/../../src/corelib/thread/qbasicatomic.h:118
#3  QtSharedPointer::ExternalRefCountData::getAndRef (obj=obj@entry=0x55d6e675bd90) at tools/qsharedpointer.cpp:1397
#4  0x00007fdd0e7ac1eb in QWeakPointer<QObject>::QWeakPointer<KWaylandServer::SurfaceInterface, true> (ptr=0x55d6e675bd90, this=0x7fff91e82290) at /usr/include/qt5/QtCore/qsharedpointer_impl.h:682
#5  QPointer<KWaylandServer::SurfaceInterface>::QPointer (p=0x55d6e675bd90, this=0x7fff91e82290) at /usr/include/qt5/QtCore/qpointer.h:62
#6  operator() (__closure=<optimized out>, __closure=<optimized out>) at /usr/src/debug/kwayland-server-5.19.2-1.fc33.x86_64/src/server/pointer_interface.cpp:241
#7  QtPrivate::FunctorCall<QtPrivate::IndexesList<>, QtPrivate::List<>, void, KWaylandServer::PointerInterface::PointerInterface(KWaylandServer::SeatInterface*, wl_resource*)::<lambda()> >::call (arg=<optimized out>, f=...) at /usr/include/qt5/QtCore/qobjectdefs_impl.h:146
#8  QtPrivate::Functor<KWaylandServer::PointerInterface::PointerInterface(KWaylandServer::SeatInterface*, wl_resource*)::<lambda()>, 0>::call<QtPrivate::List<>, void> (arg=<optimized out>, f=...) at /usr/include/qt5/QtCore/qobjectdefs_impl.h:256
#9  QtPrivate::QFunctorSlotObject<KWaylandServer::PointerInterface::PointerInterface(KWaylandServer::SeatInterface*, wl_resource*)::<lambda()>, 0, QtPrivate::List<>, void>::impl(int, QtPrivate::QSlotObjectBase *, QObject *, void **, bool *) (which=<optimized out>, this_=<optimized out>, r=<optimized out>, a=<optimized out>, ret=<optimized out>) at /usr/include/qt5/QtCore/qobjectdefs_impl.h:443
#10 0x00007fdd0dc0cf76 in QtPrivate::QSlotObjectBase::call (a=0x7fff91e82420, r=0x55d6e5333f20, this=0x55d6e53212a0) at ../../include/QtCore/../../src/corelib/kernel/qobjectdefs_impl.h:398
#11 doActivate<false> (sender=0x55d6e524f3b0, signal_index=8, argv=argv@entry=0x7fff91e82420) at kernel/qobject.cpp:3870
#12 0x00007fdd0dc077f8 in QMetaObject::activate (sender=sender@entry=0x55d6e524f3b0, m=m@entry=0x7fdd0e82f020 <KWaylandServer::SeatInterface::staticMetaObject>, local_signal_index=local_signal_index@entry=4, argv=argv@entry=0x7fff91e82420) at kernel/qobject.cpp:3930
#13 0x00007fdd0e778fa9 in KWaylandServer::SeatInterface::pointerPosChanged (this=this@entry=0x55d6e524f3b0, _t1=...) at /usr/src/debug/kwayland-server-5.19.2-1.fc33.x86_64/x86_64-redhat-linux-gnu/src/server/KWaylandServer_autogen/EWIEGA46WW/moc_seat_interface.cpp:451
#14 0x00007fdd0e7b4caa in KWaylandServer::SeatInterface::setPointerPos (this=this@entry=0x55d6e524f3b0, pos=...) at /usr/src/debug/kwayland-server-5.19.2-1.fc33.x86_64/src/server/seat_interface.cpp:620
#15 0x00007fdd0ebc4467 in KWin::PointerInputRedirection::focusUpdate (this=0x55d6e5245eb0, focusOld=<optimized out>, focusNow=0x55d6e63ded30) at /usr/include/qt5/QtCore/qpoint.h:133
#16 0x00007fdd0eb81873 in KWin::InputDeviceHandler::updateFocus (this=0x55d6e5245eb0) at /usr/include/c++/10/bits/atomic_base.h:420
#17 0x00007fdd0ebbf99a in KWin::PointerInputRedirection::processMotion (this=0x55d6e5245eb0, pos=..., delta=..., deltaNonAccelerated=..., time=9897386, timeUsec=9897386959, device=0x55d6e53204b0) at /usr/src/debug/kwin-5.19.2-1.fc33.x86_64/pointer_input.cpp:276
#18 0x00007fdd0eb800c8 in QtPrivate::QFunctorSlotObject<KWin::InputRedirection::setupLibInput()::<lambda(const QSizeF&, const QSizeF&, uint32_t, quint64, KWin::LibInput::Device*)>, 5, QtPrivate::List<const QSizeF&, const QSizeF&, unsigned int, long long unsigned int, KWin::LibInput::Device*>, void>::impl(int, QtPrivate::QSlotObjectBase *, QObject *, void **, bool *) (which=<optimized out>, this_=<optimized out>, r=<optimized out>, a=<optimized out>, ret=<optimized out>) at /usr/include/qt5/QtCore/qpoint.h:372
#19 0x00007fdd0dc0cf76 in QtPrivate::QSlotObjectBase::call (a=0x7fff91e82860, r=0x55d6e5265750, this=0x55d6e5395560) at ../../include/QtCore/../../src/corelib/kernel/qobjectdefs_impl.h:398
#20 doActivate<false> (sender=0x55d6e521ee70, signal_index=6, argv=argv@entry=0x7fff91e82860) at kernel/qobject.cpp:3870
#21 0x00007fdd0dc077f8 in QMetaObject::activate (sender=sender@entry=0x55d6e521ee70, m=m@entry=0x7fdd0ed55540 <KWin::LibInput::Connection::staticMetaObject>, local_signal_index=local_signal_index@entry=3, argv=argv@entry=0x7fff91e82860) at kernel/qobject.cpp:3930
#22 0x00007fdd0eaee2cd in KWin::LibInput::Connection::pointerMotion (this=this@entry=0x55d6e521ee70, _t1=..., _t2=..., _t3=<optimized out>, _t3@entry=9897386, _t4=<optimized out>, _t4@entry=9897386959, _t5=<optimized out>) at /usr/src/debug/kwin-5.19.2-1.fc33.x86_64/x86_64-redhat-linux-gnu/kwin_autogen/PCJB6APXE6/moc_connection.cpp:646
#23 0x00007fdd0eb9e1f1 in KWin::LibInput::Connection::processEvents (this=0x55d6e521ee70) at /usr/src/debug/kwin-5.19.2-1.fc33.x86_64/libinput/connection.cpp:414
#24 0x00007fdd0dc05b5e in QObject::event (this=0x55d6e5265750, e=0x7fdce80093b0) at kernel/qobject.cpp:1339
#25 0x00007fdd0e015063 in QApplicationPrivate::notify_helper (this=<optimized out>, receiver=0x55d6e5265750, e=0x7fdce80093b0) at kernel/qapplication.cpp:3685
#26 0x00007fdd0dbddfc0 in QCoreApplication::notifyInternal2 (receiver=0x55d6e5265750, event=0x7fdce80093b0) at ../../include/QtCore/../../src/corelib/kernel/qobject.h:153
#27 0x00007fdd0dbe0c47 in QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0x55d6e51e0d20) at kernel/qcoreapplication.cpp:1815
#28 0x00007fdd0dc26f77 in QEventDispatcherUNIX::processEvents (this=0x55d6e521d050, flags=...) at kernel/qeventdispatcher_unix.cpp:466
#29 0x00007fdcfa43ce31 in QUnixEventDispatcherQPA::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/qt5/plugins/platforms/KWinQpaPlugin.so
#30 0x00007fdd0dbdc91b in QEventLoop::exec (this=this@entry=0x7fff91e82c50, flags=..., flags@entry=...) at ../../include/QtCore/../../src/corelib/global/qflags.h:136
#31 0x00007fdd0dbe45a6 in QCoreApplication::exec () at ../../include/QtCore/../../src/corelib/global/qflags.h:118
#32 0x000055d6e4a6703b in main (argc=<optimized out>, argv=<optimized out>) at /usr/src/debug/kwin-5.19.2-1.fc33.x86_64/main_wayland.cpp:704

Version-Release number of selected component (if applicable):
kwin_wayland segmentation fault in std::__atomic_base<int>::operator++ when using vlc

How reproducible:
These crashes have happened many times in the last few months. These crashes tend to happen from 10 minutes to days apart when using vlc, firefox, or thunderbird. Two crashes with this trace happened in the last day both when playing videos in vlc. 


Steps to Reproduce:
1. Boot Fedora Rawhide KDE Plasma spin installation fully updated to 2020-6-27, with kwin-wayland, plasma-workspace-wayland, and their dependencies installed
2. Log in to Plasma on Wayland from sddm
3. The core dump file was 2.4 GB uncompressed, so
change /etc/systemd/coredump.conf to have 
ProcessSizeMax=3G
ExternalSizeMax=3G 
4. Install rpmfusion-free-rawhide repository
sudo dnf install https://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-$(rpm -E %fedora).noarch.rpm
5. sudo dnf install vlc --enablerepo=rpmfusion-*
6. start vlc
7. play mp4 videos in vlc while moving the mouse pointer around until the crash happens. I'm not sure if the crashes are related to what is done in VLC or not.

Actual results:
kwin_wayland segmentation fault in std::__atomic_base<int>::operator++ when using vlc

Expected results:
No crash

Additional info:

The crash showed up in the journal as follows.

Jun 27 20:32:17 kernel: show_signal: 2 callbacks suppressed
Jun 27 20:32:17 kernel: traps: kwin_wayland[12932] general protection fault ip:7fdd0da887a3 sp:7fff91e82240 error:0 in libQt5Core.so.5.14.2[7fdd0da12000+282000]
Jun 27 20:32:17 audit[12932]: ANOM_ABEND auid=1000 uid=1000 gid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=12932 comm="kwin_wayland" exe="/usr/bin/kwin_wayland" sig=11 res=1
Jun 27 20:32:17 audit: BPF prog-id=233 op=LOAD
Jun 27 20:32:17 audit: BPF prog-id=234 op=LOAD
Jun 27 20:32:17 audit: BPF prog-id=235 op=LOAD
Jun 27 20:32:17 systemd[1]: Started Process Core Dump (PID 15451/UID 0).
Jun 27 20:32:17 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-coredump@61-15451-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'

I reported these crashes at https://bugs.kde.org/show_bug.cgi?id=423602
I've seen kwin_wayland segmentation faults with similar traces but some differing functions involving invalid pointers, kwayland-server, and pointer positions occasionally as I reported at https://bugzilla.redhat.com/show_bug.cgi?id=1797165 and https://bugs.kde.org/show_bug.cgi?id=416974