Regression in 0.56: "workspace N silent" window rule applied to a toplevel created during an active tab drag corrupts layout state, SIGSEGV in CDwindleAlgorithm::resizeTarget

[mindrunner]

Hyprland Version

Hyprland 0.56.1 built from branch v0.56.1 at commit 5c9377c15f85c50648f35ca5a213754f95b93ca0 clean (version: bump to 0.56.1).
Tag: v0.56.1, commits: 7643

Hyprgraphics: 0.5.1, Hyprutils: 0.14.0, Hyprcursor: 0.1.13, Hyprlang: 0.6.8, Aquamarine: 0.14.0

Arch Linux, kernel 6.18.41-1-lts. GPU: Intel Arc A380 (DG2). Dwindle layout, Lua config.

Regression window: never happened on 0.55.x (0.55.4 and earlier, in daily use since May). First crash occurred the same day 0.56.0 was installed; reproduces on 0.56.1.

Bug or Regression Description

I run Chrome instances with custom classes (--class=jup-chrome etc.) and had persistent window rules pinning them to workspaces:

hl.window_rule({
  match = { class = "jup-chrome" },
  workspace = "4 silent",
})

With such a rule active, tearing a tab out of a Chrome window (which creates a new toplevel while the toplevel drag is still active) breaks the compositor in stages:

1. The torn-out window is immediately moved to the rule's workspace, mid-drag.
2. The window then misbehaves: sometimes it is not rendered at all (invisible), while still present in hyprctl clients.
3. The dwindle layout keeps a node for the invisible window. Remaining visible windows can no longer use the full workspace; the ghost node keeps consuming tiling space.
4. A subsequent mouse-resize of a tiled window on that workspace segfaults Hyprland.

On 0.55.x the same config and the same action were harmless (the torn-out window would just end up on the pinned workspace after the drag, with no layout corruption).

Removing the persistent workspace N silent rules for these classes makes the whole chain (wrong placement, ghost window, crash) disappear. So the trigger is specifically: a window rule with a silent workspace move matching a toplevel that is created during an active xdg toplevel drag.

Even with a "bad" config, the compositor presumably shouldn't end up with a corrupted layout tree and segfault. Either the workspace move should be deferred until the drag ends, or the drag/layout state should survive the move.

How to Reproduce

1. Dwindle layout, any monitor setup (mine is 3 monitors, workspaces bound per monitor).
2. Add a window rule: class google-chrome (or a custom --class), workspace = "N silent" where N is not the current workspace.
3. Open that Chrome instance, several tabs, on its pinned workspace.
4. Drag a tab out of the tab bar to tear it into a new window.
5. Observe the new window jump to another workspace mid-drag; often it stops rendering, and the dwindle tree on the target workspace keeps an invisible node.
6. Mouse-resize (SUPER + right-drag / resize corner) any tiled window on the affected workspace: SIGSEGV.

Crashes within one or two attempts for me.

Crash Report (backtrace)

Two identical crash reports from consecutive days, both:

Hyprland received signal 11(SEGV)
Version: 5c9377c15f85c50648f35ca5a213754f95b93ca0 (v0.56.1)

#4  Layout::Tiled::CDwindleAlgorithm::resizeTarget(Hyprutils::Math::Vector2D const&, CSharedPointer<Layout::ITarget>, Layout::eRectCorner)
#5  Layout::CAlgorithm::resizeTarget(...)
#6  Layout::CSpace::resizeTarget(...)
#7  Layout::CLayoutManager::resizeTarget(...)
#8  Layout::Supplementary::CDragStateController::mouseMove(Vector2D const&)
#9  CInputManager::mouseMoveUnified(...)
#10 CInputManager::onMouseMoved(IPointer::SMotionEvent)
...
#18 Aquamarine::CSession::handleLibinputEvent(...)

Full crash reports below.

hyprlandCrashReport1852.txt

--------------------------------------------
   Hyprland Crash Report
--------------------------------------------
Maybe you should try dusting your PC in the meantime?

Hyprland received signal 11(SEGV)
Version: 5c9377c15f85c50648f35ca5a213754f95b93ca0
Tag: v0.56.1
Date: Mon Jul 27 16:33:49 2026
Flags:

System info:
	System name: Linux
	Node name: station
	Release: 6.18.41-1-lts
	Version: #1 SMP PREEMPT_DYNAMIC Thu, 30 Jul 2026 11:55:49 +0000

GPU:
	03:00.0 VGA compatible controller [0300]: Intel Corporation DG2 [Arc A380] [8086:56a5] (rev 05) (prog-if 00 [VGA controller])


os-release:
	NAME="Arch Linux"
	PRETTY_NAME="Arch Linux"
	ID=arch
	BUILD_ID=rolling
	ANSI_COLOR="38;2;23;147;209"
	HOME_URL="https://archlinux.org/"
	DOCUMENTATION_URL="https://wiki.archlinux.org/"
	SUPPORT_URL="https://bbs.archlinux.org/"
	BUG_REPORT_URL="https://gitlab.archlinux.org/groups/archlinux/-/issues"
	PRIVACY_POLICY_URL="https://terms.archlinux.org/docs/privacy-policy/"
	LOGO=archlinux-logo

Libraries:
Hyprgraphics: built against 0.5.1, system has 0.5.1
Hyprutils: built against 0.14.0, system has 0.14.0
Hyprcursor: built against 0.1.13, system has 0.1.13
Hyprlang: built against 0.6.8, system has 0.6.8
Aquamarine: built against 0.14.0, system has 0.14.0

Backtrace:
	#0 | Hyprland(_Z12getBacktracev+0x73) [0x55cf671e34b3]
		getBacktrace()
		??:?
	#1 | Hyprland(_ZN13CrashReporter18createAndSaveCrashEi+0xad4) [0x55cf67107a14]
		CrashReporter::createAndSaveCrash(int)
		??:?
	#2 | Hyprland(+0x3bc6ee) [0x55cf66fdd6ee]
		void std::println<>(_IO_FILE*, std::basic_format_string<char>)
		??:?
	#3 | /usr/lib/libc.so.6(+0x3e6f0) [0x7f374e43e6f0]
		??
		??:0
	#4 | Hyprland(_ZN6Layout5Tiled17CDwindleAlgorithm12resizeTargetERKN9Hyprutils4Math8Vector2DENS2_6Memory14CSharedPointerINS_7ITargetEEENS_11eRectCornerE+0x10d7) [0x55cf677de627]
		Layout::Tiled::CDwindleAlgorithm::resizeTarget(Hyprutils::Math::Vector2D const&, Hyprutils::Memory::CSharedPointer<Layout::ITarget>, Layout::eRectCorner)
		??:?
	#5 | Hyprland(_ZN6Layout10CAlgorithm12resizeTargetERKN9Hyprutils4Math8Vector2DENS1_6Memory14CSharedPointerINS_7ITargetEEENS_11eRectCornerE+0x105) [0x55cf67213c05]
		Layout::CAlgorithm::resizeTarget(Hyprutils::Math::Vector2D const&, Hyprutils::Memory::CSharedPointer<Layout::ITarget>, Layout::eRectCorner)
		??:?
	#6 | Hyprland(_ZN6Layout6CSpace12resizeTargetERKN9Hyprutils4Math8Vector2DENS1_6Memory14CSharedPointerINS_7ITargetEEENS_11eRectCornerE+0x4f) [0x55cf6725937f]
		Layout::CSpace::resizeTarget(Hyprutils::Math::Vector2D const&, Hyprutils::Memory::CSharedPointer<Layout::ITarget>, Layout::eRectCorner)
		??:?
	#7 | Hyprland(_ZN6Layout14CLayoutManager12resizeTargetERKN9Hyprutils4Math8Vector2DENS1_6Memory14CSharedPointerINS_7ITargetEEENS_11eRectCornerE+0xbb) [0x55cf6720dc4b]
		Layout::CLayoutManager::resizeTarget(Hyprutils::Math::Vector2D const&, Hyprutils::Memory::CSharedPointer<Layout::ITarget>, Layout::eRectCorner)
		??:?
	#8 | Hyprland(_ZN6Layout13Supplementary20CDragStateController9mouseMoveERKN9Hyprutils4Math8Vector2DE+0x12ea) [0x55cf672604fa]
		Layout::Supplementary::CDragStateController::mouseMove(Hyprutils::Math::Vector2D const&)
		??:?
	#9 | Hyprland(_ZN13CInputManager16mouseMoveUnifiedEjbbSt8optionalIN9Hyprutils4Math8Vector2DEE+0xe01) [0x55cf672f46e1]
		CInputManager::mouseMoveUnified(unsigned int, bool, bool, std::optional<Hyprutils::Math::Vector2D>)
		??:?
	#10 | Hyprland(_ZN13CInputManager12onMouseMovedEN8IPointer12SMotionEventE+0x311) [0x55cf672fcaf1]
		CInputManager::onMouseMoved(IPointer::SMotionEvent)
		??:?
	#11 | Hyprland(+0x7745ee) [0x55cf673955ee]
		Pointer::CPointerManager::recheckEnteredOutputs()
		??:?
	#12 | /usr/lib/libhyprutils.so.13(_ZN9Hyprutils6Signal15CSignalListener12emitInternalEPv+0x2d) [0x7f3750047acd]
		??
		??:0
	#13 | /usr/lib/libhyprutils.so.13(_ZN9Hyprutils6Signal11CSignalBase12emitInternalEPv+0x1d3) [0x7f3750047d63]
		??
		??:0
	#14 | Hyprland(+0xb8d960) [0x55cf677ae960]
		CMouse::aq()
		??:?
	#15 | Hyprland(_ZNSt17_Function_handlerIFvPvEZN9Hyprutils6Signal8CSignalTIJN10Aquamarine8IPointer10SMoveEventEEE9mkHandlerESt8functionIFvS7_EEEUlS0_E_E9_M_invokeERKSt9_Any_dataOS0_+0x49) [0x55cf677b0d89]
		std::_Function_handler<void (void*), Hyprutils::Signal::CSignalT<Aquamarine::IPointer::SMoveEvent>::mkHandler(std::function<void (Aquamarine::IPointer::SMoveEvent)>)::{lambda(void*)#1}>::_M_invoke(std::_Any_data const&, void*&&)
		??:?
	#16 | /usr/lib/libhyprutils.so.13(_ZN9Hyprutils6Signal15CSignalListener12emitInternalEPv+0x2d) [0x7f3750047acd]
		??
		??:0
	#17 | /usr/lib/libhyprutils.so.13(_ZN9Hyprutils6Signal11CSignalBase12emitInternalEPv+0x1d3) [0x7f3750047d63]
		??
		??:0
	#18 | /usr/lib/libaquamarine.so.13(_ZN10Aquamarine8CSession19handleLibinputEventEP14libinput_event+0x1cd7) [0x7f375013f617]
		??
		??:0
	#19 | /usr/lib/libaquamarine.so.13(_ZN10Aquamarine8CSession22dispatchLibinputEventsEv+0xec) [0x7f37501400bc]
		??
		??:0
	#20 | Hyprland(+0x6a055a) [0x55cf672c155a]
		std::_Hashtable<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::pair<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const, unsigned int>, std::allocator<std::pair<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const, unsigned int> >, std::__detail::_Select1st, std::equal_to<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::hash<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::__detail::_Mod_range_hashing, std::__detail::_Default_ranged_hash, std::__detail::_Prime_rehash_policy, std::__detail::_Hashtable_traits<true, false, true> >::_M_insert_unique_node(unsigned long, unsigned long, std::__detail::_Hash_node<std::pair<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const, unsigned int>, true>*, unsigned long)
		??:?
	#21 | /usr/lib/libwayland-server.so.0(wl_event_loop_dispatch+0x1d2) [0x7f374fef73d2]
		??
		??:0
	#22 | /usr/lib/libwayland-server.so.0(wl_display_run+0x37) [0x7f374fef9567]
		??
		??:0
	#23 | Hyprland(_ZN17CEventLoopManager9enterLoopEv+0x2f3) [0x55cf672c4933]
		CEventLoopManager::enterLoop()
		??:?
	#24 | Hyprland(main+0x1174) [0x55cf66e9dc44]
		main
		??:?
	#25 | /usr/lib/libc.so.6(+0x27781) [0x7f374e427781]
		??
		??:0
	#26 | /usr/lib/libc.so.6(__libc_start_main+0x89) [0x7f374e4278b9]
		??
		??:0
	#27 | Hyprland(_start+0x25) [0x55cf66fc64e5]
		_start
		??:?


Log tail:
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 319
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_UP → DEBOUNCE_EVENT_OTHERBUTTON → DEBOUNCE_STATE_IS_UP
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_UP → DEBOUNCE_EVENT_PRESS → DEBOUNCE_STATE_IS_DOWN_WAITING
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_DOWN_WAITING → DEBOUNCE_EVENT_TIMEOUT → DEBOUNCE_STATE_IS_DOWN
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 325
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 319
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_DOWN → DEBOUNCE_EVENT_RELEASE → DEBOUNCE_STATE_IS_UP_DETECTING_SPURIOUS
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_UP_DETECTING_SPURIOUS → DEBOUNCE_EVENT_TIMEOUT_SHORT → DEBOUNCE_STATE_IS_UP_WAITING
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_UP_WAITING → DEBOUNCE_EVENT_TIMEOUT → DEBOUNCE_STATE_IS_UP
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 325
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 319
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 325
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 319
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_UP → DEBOUNCE_EVENT_PRESS → DEBOUNCE_STATE_IS_DOWN_WAITING
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_DOWN_WAITING → DEBOUNCE_EVENT_TIMEOUT → DEBOUNCE_STATE_IS_DOWN
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 325
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 319
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_DOWN → DEBOUNCE_EVENT_RELEASE → DEBOUNCE_STATE_IS_UP_DETECTING_SPURIOUS
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_UP_DETECTING_SPURIOUS → DEBOUNCE_EVENT_TIMEOUT_SHORT → DEBOUNCE_STATE_IS_UP_WAITING
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_UP_WAITING → DEBOUNCE_EVENT_TIMEOUT → DEBOUNCE_STATE_IS_UP
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 325
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 325
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_UP → DEBOUNCE_EVENT_PRESS → DEBOUNCE_STATE_IS_DOWN_WAITING
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_DOWN_WAITING → DEBOUNCE_EVENT_TIMEOUT → DEBOUNCE_STATE_IS_DOWN
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 319
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 325
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_DOWN → DEBOUNCE_EVENT_RELEASE → DEBOUNCE_STATE_IS_UP_DETECTING_SPURIOUS
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_UP_DETECTING_SPURIOUS → DEBOUNCE_EVENT_TIMEOUT_SHORT → DEBOUNCE_STATE_IS_UP_WAITING
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_UP_WAITING → DEBOUNCE_EVENT_TIMEOUT → DEBOUNCE_STATE_IS_UP
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 319
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_UP → DEBOUNCE_EVENT_PRESS → DEBOUNCE_STATE_IS_DOWN_WAITING
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 325
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_DOWN_WAITING → DEBOUNCE_EVENT_TIMEOUT → DEBOUNCE_STATE_IS_DOWN

hyprlandCrashReport2390287.txt

--------------------------------------------
   Hyprland Crash Report
--------------------------------------------
Oops

Hyprland received signal 11(SEGV)
Version: 5c9377c15f85c50648f35ca5a213754f95b93ca0
Tag: v0.56.1
Date: Mon Jul 27 16:33:49 2026
Flags:

System info:
	System name: Linux
	Node name: station
	Release: 6.18.41-1-lts
	Version: #1 SMP PREEMPT_DYNAMIC Thu, 30 Jul 2026 11:55:49 +0000

GPU:
	03:00.0 VGA compatible controller [0300]: Intel Corporation DG2 [Arc A380] [8086:56a5] (rev 05) (prog-if 00 [VGA controller])


os-release:
	NAME="Arch Linux"
	PRETTY_NAME="Arch Linux"
	ID=arch
	BUILD_ID=rolling
	ANSI_COLOR="38;2;23;147;209"
	HOME_URL="https://archlinux.org/"
	DOCUMENTATION_URL="https://wiki.archlinux.org/"
	SUPPORT_URL="https://bbs.archlinux.org/"
	BUG_REPORT_URL="https://gitlab.archlinux.org/groups/archlinux/-/issues"
	PRIVACY_POLICY_URL="https://terms.archlinux.org/docs/privacy-policy/"
	LOGO=archlinux-logo

Libraries:
Hyprgraphics: built against 0.5.1, system has 0.5.1
Hyprutils: built against 0.14.0, system has 0.14.0
Hyprcursor: built against 0.1.13, system has 0.1.13
Hyprlang: built against 0.6.8, system has 0.6.8
Aquamarine: built against 0.14.0, system has 0.14.0

Backtrace:
	#0 | Hyprland(_Z12getBacktracev+0x73) [0x55a4a128f4b3]
		getBacktrace()
		??:?
	#1 | Hyprland(_ZN13CrashReporter18createAndSaveCrashEi+0xad4) [0x55a4a11b3a14]
		CrashReporter::createAndSaveCrash(int)
		??:?
	#2 | Hyprland(+0x3bc6ee) [0x55a4a10896ee]
		void std::println<>(_IO_FILE*, std::basic_format_string<char>)
		??:?
	#3 | /usr/lib/libc.so.6(+0x3e6f0) [0x7f337a83e6f0]
		??
		??:0
	#4 | Hyprland(_ZN6Layout5Tiled17CDwindleAlgorithm12resizeTargetERKN9Hyprutils4Math8Vector2DENS2_6Memory14CSharedPointerINS_7ITargetEEENS_11eRectCornerE+0x10d7) [0x55a4a188a627]
		Layout::Tiled::CDwindleAlgorithm::resizeTarget(Hyprutils::Math::Vector2D const&, Hyprutils::Memory::CSharedPointer<Layout::ITarget>, Layout::eRectCorner)
		??:?
	#5 | Hyprland(_ZN6Layout10CAlgorithm12resizeTargetERKN9Hyprutils4Math8Vector2DENS1_6Memory14CSharedPointerINS_7ITargetEEENS_11eRectCornerE+0x105) [0x55a4a12bfc05]
		Layout::CAlgorithm::resizeTarget(Hyprutils::Math::Vector2D const&, Hyprutils::Memory::CSharedPointer<Layout::ITarget>, Layout::eRectCorner)
		??:?
	#6 | Hyprland(_ZN6Layout6CSpace12resizeTargetERKN9Hyprutils4Math8Vector2DENS1_6Memory14CSharedPointerINS_7ITargetEEENS_11eRectCornerE+0x4f) [0x55a4a130537f]
		Layout::CSpace::resizeTarget(Hyprutils::Math::Vector2D const&, Hyprutils::Memory::CSharedPointer<Layout::ITarget>, Layout::eRectCorner)
		??:?
	#7 | Hyprland(_ZN6Layout14CLayoutManager12resizeTargetERKN9Hyprutils4Math8Vector2DENS1_6Memory14CSharedPointerINS_7ITargetEEENS_11eRectCornerE+0xbb) [0x55a4a12b9c4b]
		Layout::CLayoutManager::resizeTarget(Hyprutils::Math::Vector2D const&, Hyprutils::Memory::CSharedPointer<Layout::ITarget>, Layout::eRectCorner)
		??:?
	#8 | Hyprland(_ZN6Layout13Supplementary20CDragStateController9mouseMoveERKN9Hyprutils4Math8Vector2DE+0x12ea) [0x55a4a130c4fa]
		Layout::Supplementary::CDragStateController::mouseMove(Hyprutils::Math::Vector2D const&)
		??:?
	#9 | Hyprland(_ZN13CInputManager16mouseMoveUnifiedEjbbSt8optionalIN9Hyprutils4Math8Vector2DEE+0xe01) [0x55a4a13a06e1]
		CInputManager::mouseMoveUnified(unsigned int, bool, bool, std::optional<Hyprutils::Math::Vector2D>)
		??:?
	#10 | Hyprland(_ZN13CInputManager12onMouseMovedEN8IPointer12SMotionEventE+0x311) [0x55a4a13a8af1]
		CInputManager::onMouseMoved(IPointer::SMotionEvent)
		??:?
	#11 | Hyprland(+0x7745ee) [0x55a4a14415ee]
		Pointer::CPointerManager::recheckEnteredOutputs()
		??:?
	#12 | /usr/lib/libhyprutils.so.13(_ZN9Hyprutils6Signal15CSignalListener12emitInternalEPv+0x2d) [0x7f337c4f5acd]
		??
		??:0
	#13 | /usr/lib/libhyprutils.so.13(_ZN9Hyprutils6Signal11CSignalBase12emitInternalEPv+0x1d3) [0x7f337c4f5d63]
		??
		??:0
	#14 | Hyprland(+0xb8d960) [0x55a4a185a960]
		CMouse::aq()
		??:?
	#15 | Hyprland(_ZNSt17_Function_handlerIFvPvEZN9Hyprutils6Signal8CSignalTIJN10Aquamarine8IPointer10SMoveEventEEE9mkHandlerESt8functionIFvS7_EEEUlS0_E_E9_M_invokeERKSt9_Any_dataOS0_+0x49) [0x55a4a185cd89]
		std::_Function_handler<void (void*), Hyprutils::Signal::CSignalT<Aquamarine::IPointer::SMoveEvent>::mkHandler(std::function<void (Aquamarine::IPointer::SMoveEvent)>)::{lambda(void*)#1}>::_M_invoke(std::_Any_data const&, void*&&)
		??:?
	#16 | /usr/lib/libhyprutils.so.13(_ZN9Hyprutils6Signal15CSignalListener12emitInternalEPv+0x2d) [0x7f337c4f5acd]
		??
		??:0
	#17 | /usr/lib/libhyprutils.so.13(_ZN9Hyprutils6Signal11CSignalBase12emitInternalEPv+0x1d3) [0x7f337c4f5d63]
		??
		??:0
	#18 | /usr/lib/libaquamarine.so.13(_ZN10Aquamarine8CSession19handleLibinputEventEP14libinput_event+0x1cd7) [0x7f337c5ed617]
		??
		??:0
	#19 | /usr/lib/libaquamarine.so.13(_ZN10Aquamarine8CSession22dispatchLibinputEventsEv+0xec) [0x7f337c5ee0bc]
		??
		??:0
	#20 | Hyprland(+0x6a055a) [0x55a4a136d55a]
		std::_Hashtable<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::pair<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const, unsigned int>, std::allocator<std::pair<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const, unsigned int> >, std::__detail::_Select1st, std::equal_to<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::hash<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::__detail::_Mod_range_hashing, std::__detail::_Default_ranged_hash, std::__detail::_Prime_rehash_policy, std::__detail::_Hashtable_traits<true, false, true> >::_M_insert_unique_node(unsigned long, unsigned long, std::__detail::_Hash_node<std::pair<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const, unsigned int>, true>*, unsigned long)
		??:?
	#21 | /usr/lib/libwayland-server.so.0(wl_event_loop_dispatch+0x1d2) [0x7f337c3a53d2]
		??
		??:0
	#22 | /usr/lib/libwayland-server.so.0(wl_display_run+0x37) [0x7f337c3a7567]
		??
		??:0
	#23 | Hyprland(_ZN17CEventLoopManager9enterLoopEv+0x2f3) [0x55a4a1370933]
		CEventLoopManager::enterLoop()
		??:?
	#24 | Hyprland(main+0x1174) [0x55a4a0f49c44]
		main
		??:?
	#25 | /usr/lib/libc.so.6(+0x27781) [0x7f337a827781]
		??
		??:0
	#26 | /usr/lib/libc.so.6(__libc_start_main+0x89) [0x7f337a8278b9]
		??
		??:0
	#27 | Hyprland(_start+0x25) [0x55a4a10724e5]
		_start
		??:?


Log tail:
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 341
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 343
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 341
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 343
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 341
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 343
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 341
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 343
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 341
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 343
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_UP → DEBOUNCE_EVENT_OTHERBUTTON → DEBOUNCE_STATE_IS_UP
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_UP → DEBOUNCE_EVENT_PRESS → DEBOUNCE_STATE_IS_DOWN_WAITING
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_DOWN_WAITING → DEBOUNCE_EVENT_TIMEOUT → DEBOUNCE_STATE_IS_DOWN
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_DOWN → DEBOUNCE_EVENT_RELEASE → DEBOUNCE_STATE_IS_UP_DETECTING_SPURIOUS
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_UP_DETECTING_SPURIOUS → DEBOUNCE_EVENT_TIMEOUT_SHORT → DEBOUNCE_STATE_IS_UP_WAITING
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_UP_WAITING → DEBOUNCE_EVENT_TIMEOUT → DEBOUNCE_STATE_IS_UP
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_UP → DEBOUNCE_EVENT_PRESS → DEBOUNCE_STATE_IS_DOWN_WAITING
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_DOWN_WAITING → DEBOUNCE_EVENT_TIMEOUT → DEBOUNCE_STATE_IS_DOWN
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_DOWN → DEBOUNCE_EVENT_RELEASE → DEBOUNCE_STATE_IS_UP_DETECTING_SPURIOUS
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_UP_DETECTING_SPURIOUS → DEBOUNCE_EVENT_TIMEOUT_SHORT → DEBOUNCE_STATE_IS_UP_WAITING
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_UP_WAITING → DEBOUNCE_EVENT_TIMEOUT → DEBOUNCE_STATE_IS_UP
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 341
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 341
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 343
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 341
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 317
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 317
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 323
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 317
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 323
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 317
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 317
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 323
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 317
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 317
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 323
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_UP → DEBOUNCE_EVENT_OTHERBUTTON → DEBOUNCE_STATE_IS_UP
DEBUG from aquamarine ]: [libinput] Plugin:button-debounce - debounce state: DEBOUNCE_STATE_IS_UP → DEBOUNCE_EVENT_PRESS → DEBOUNCE_STATE_IS_DOWN_WAITING
DEBUG from aquamarine ]: drm: Cursor buffer imported into KMS with id 317

[mindrunner]

Update: I traced the regression to a specific commit by source analysis.

Faulty commit: 9d28438 "protocols/xdg-shell: add support for xdg interactive drags (#15343)", first released in v0.56.0. This matches my regression window exactly (0.55.x fine, first crash on the day I installed 0.56.0).

Mechanism:

Before this commit, xdg_toplevel.move requests were ignored, so a Chrome tab tear-out just mapped a new window that the workspace rule then moved. Harmless.

After it, the sequence on tear-out is:

1. The new toplevel maps. Map-time window rules run first, so workspace = "N silent" moves the window into another workspace's tiling tree (often an inactive workspace, possibly on another monitor).
2. Chrome then sends xdg_toplevel.move. CWindow::onXDGMoveRequest (src/desktop/view/Window.cpp:2825) starts a compositor drag with an exclusive device grab. It only checks mapped/hidden/existing-drag. CDragStateController::dragBegin (src/layout/supplementary/DragController.cpp:149) only checks that the workspace is non-null. Neither verifies the target is on the active workspace.
3. updateDragWindow() untiles the window from the wrong workspace's tree via changeFloatingMode() and floats it at the cursor on the visible monitor, while its workspace stays the pinned one. This is the invisible ghost that keeps consuming tiling space.
4. On drag end it re-tiles into the pinned workspace's dwindle tree with geometry from the wrong monitor, leaving the tree inconsistent. The next mouse resize walks it in CDwindleAlgorithm::resizeTarget (unguarded m_parent->space()->workspace()->m_monitor and parent-chain derefs) and segfaults.

Related but distinct: #15789 / commit a269fd7 fix a stale m_draggingTiled in the same controller; that patch does not cover this scenario. Still reproducible in my reading of current main, and v0.56.2 does not contain a fix either.

Possible fixes, in increasing order of niceness:

• Reject the move/resize request in onXDGMoveRequest/onXDGResizeRequest when the window's workspace is not the currently active one (restores 0.55 behavior for this case).
• At drag begin, first move the target to the cursor's active workspace (the movetoworkspacesilent machinery exists), then start the drag. This would actually make tab tear-out behave as users expect even with such rules.
• Additionally, defensive guards in resizeTarget so a corrupt tree cannot take down the compositor.

[thejko]

I hit the same crash signature on v0.56.2 today, but I do not have a Chrome workspace N silent rule, so the corrupt drag or layout state may have another entry path.

Environment:

• Hyprland 0.56.2, commit efb50993780079460b0cbed1363e2166a2de1d9f
• Omarchy / Arch Linux, kernel 7.1.8-arch1-3
• NVIDIA GeForce RTX 4080 SUPER
• Dwindle layout with Lua config
• One 5120x1440 output
• No Hyprland plugins loaded
• Hyprgraphics 0.5.1, Hyprutils built against 0.14.0 with 0.14.1 installed, Hyprcursor 0.1.13, Hyprlang 0.6.8, Aquamarine 0.14.0

Observed timeline:

• Google Chrome was launched at 20:17:28.
• Hyprland crashed at 20:17:32.
• I cannot confirm a Chrome tab tear-out or provide a reliable minimal reproduction.
• The active config has no parse errors and no Chrome rule that moves it to a silent workspace. The only silent workspace rules are unrelated rules for Blender and two small notification-panel classes.

The crash report says Hyprland received SIGSEGV. The coredump records the later crash-handler SIGABRT. The relevant frames match this discussion exactly:

#4  Layout::Tiled::CDwindleAlgorithm::resizeTarget(...) +0x10d7
#5  Layout::CAlgorithm::resizeTarget(...)
#6  Layout::CSpace::resizeTarget(...)
#7  Layout::CLayoutManager::resizeTarget(...)
#8  Layout::Supplementary::CDragStateController::mouseMove(...) +0x12ea
#9  CInputManager::mouseMoveUnified(...)
#10 CInputManager::onMouseMoved(...)
...
#18 Aquamarine::CSession::handleLibinputEvent(...)

This was a real compositor crash rather than OOM or GPU reset: memory pressure was normal, no OOM event was logged, and the trace stays in the dwindle interactive resize path.

Filed by GPT-5 via Codex.