multifundchannel crashed my node and now it won't start

[btweenthebars]

v25.12.1

So I was trying to open a channel to node with 35 utxos with the fee of 0.8 and it crashed at that moment. This is in lnlog

2026-04-05T05:16:15.694Z BROKEN hsmd: FATAL SIGNAL 6 (version v25.12.1-modded)
2026-04-05T05:16:15.694Z BROKEN hsmd: backtrace: common/daemon.c:46 (send_backtrace) 0x57aa6ede9cda
2026-04-05T05:16:15.694Z BROKEN hsmd: backtrace: common/daemon.c:83 (crashdump) 0x57aa6ede9d29
2026-04-05T05:16:15.694Z BROKEN hsmd: backtrace: ./signal/../sysdeps/unix/sysv/linux/x86_64/libc_sigaction.c:0 ((null)) 0x763356c4532f
2026-04-05T05:16:15.694Z BROKEN hsmd: backtrace: ./nptl/pthread_kill.c:44 (__pthread_kill_implementation) 0x763356c9eb2c
2026-04-05T05:16:15.694Z BROKEN hsmd: backtrace: ./nptl/pthread_kill.c:78 (__pthread_kill_internal) 0x763356c9eb2c
2026-04-05T05:16:15.694Z BROKEN hsmd: backtrace: ./nptl/pthread_kill.c:89 (__GI___pthread_kill) 0x763356c9eb2c
2026-04-05T05:16:15.694Z BROKEN hsmd: backtrace: ../sysdeps/posix/raise.c:26 (__GI_raise) 0x763356c4527d
2026-04-05T05:16:15.694Z BROKEN hsmd: backtrace: ./stdlib/abort.c:79 (__GI_abort) 0x763356c288fe
2026-04-05T05:16:15.694Z BROKEN hsmd: backtrace: ./assert/assert.c:96 (__assert_fail_base) 0x763356c2881a
2026-04-05T05:16:15.694Z BROKEN hsmd: backtrace: ./assert/assert.c:105 (__assert_fail) 0x763356c3b516
2026-04-05T05:16:15.694Z BROKEN hsmd: backtrace: bitcoin/psbt.c:329 (psbt_input_add_pubkey) 0x57aa6edfdf87
2026-04-05T05:16:15.694Z BROKEN hsmd: backtrace: hsmd/libhsmd.c:582 (sign_our_inputs) 0x57aa6ede706f
2026-04-05T05:16:15.694Z BROKEN hsmd: backtrace: hsmd/libhsmd.c:1408 (handle_sign_withdrawal_tx) 0x57aa6ede71b5
2026-04-05T05:16:15.694Z BROKEN hsmd: backtrace: hsmd/libhsmd.c:2274 (hsmd_handle_client_message) 0x57aa6ede75df
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: hsmd/hsmd.c:809 (handle_client) 0x57aa6edd9adb
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: ccan/ccan/io/io.c:60 (next_plan) 0x57aa6ee0b23d
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: ccan/ccan/io/io.c:422 (do_plan) 0x57aa6ee0b70e
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: ccan/ccan/io/io.c:439 (io_ready) 0x57aa6ee0b7cb
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: ccan/ccan/io/poll.c:470 (io_loop) 0x57aa6ee0d1d9
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: hsmd/hsmd.c:894 (main) 0x57aa6edd9e74
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: ../sysdeps/nptl/libc_start_call_main.h:58 (__libc_start_call_main) 0x763356c2a1c9
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: ../csu/libc-start.c:360 (__libc_start_main_impl) 0x763356c2a28a
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: (null):0 ((null)) 0x57aa6edd8714
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: (null):0 ((null)) 0xffffffffffffffff
2026-04-05T05:16:15.695Z BROKEN hsmd: FATAL SIGNAL (version v25.12.1-modded)
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: common/daemon.c:46 (send_backtrace) 0x57aa6ede9cda
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: common/status.c:207 (status_failed) 0x57aa6edeeecb
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: common/subdaemon.c:18 (status_backtrace_exit) 0x57aa6edef009
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: common/daemon.c:87 (crashdump) 0x57aa6ede9d37
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: ./signal/../sysdeps/unix/sysv/linux/x86_64/libc_sigaction.c:0 ((null)) 0x763356c4532f
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: ./nptl/pthread_kill.c:44 (__pthread_kill_implementation) 0x763356c9eb2c
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: ./nptl/pthread_kill.c:78 (__pthread_kill_internal) 0x763356c9eb2c
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: ./nptl/pthread_kill.c:89 (__GI___pthread_kill) 0x763356c9eb2c
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: ../sysdeps/posix/raise.c:26 (__GI_raise) 0x763356c4527d
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: ./stdlib/abort.c:79 (__GI_abort) 0x763356c288fe
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: ./assert/assert.c:96 (__assert_fail_base) 0x763356c2881a
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: ./assert/assert.c:105 (__assert_fail) 0x763356c3b516
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: bitcoin/psbt.c:329 (psbt_input_add_pubkey) 0x57aa6edfdf87
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: hsmd/libhsmd.c:582 (sign_our_inputs) 0x57aa6ede706f
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: hsmd/libhsmd.c:1408 (handle_sign_withdrawal_tx) 0x57aa6ede71b5
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: hsmd/libhsmd.c:2274 (hsmd_handle_client_message) 0x57aa6ede75df
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: hsmd/hsmd.c:809 (handle_client) 0x57aa6edd9adb
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: ccan/ccan/io/io.c:60 (next_plan) 0x57aa6ee0b23d
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: ccan/ccan/io/io.c:422 (do_plan) 0x57aa6ee0b70e
2026-04-05T05:16:15.695Z BROKEN hsmd: backtrace: ccan/ccan/io/io.c:439 (io_ready) 0x57aa6ee0b7cb
2026-04-05T05:16:15.696Z BROKEN hsmd: backtrace: ccan/ccan/io/poll.c:470 (io_loop) 0x57aa6ee0d1d9
2026-04-05T05:16:15.696Z BROKEN hsmd: backtrace: hsmd/hsmd.c:894 (main) 0x57aa6edd9e74
2026-04-05T05:16:15.696Z BROKEN hsmd: backtrace: ../sysdeps/nptl/libc_start_call_main.h:58 (__libc_start_call_main) 0x763356c2a1c9
2026-04-05T05:16:15.696Z BROKEN hsmd: backtrace: ../csu/libc-start.c:360 (__libc_start_main_impl) 0x763356c2a28a
2026-04-05T05:16:15.696Z BROKEN hsmd: backtrace: (null):0 ((null)) 0x57aa6edd8714
2026-04-05T05:16:15.696Z BROKEN hsmd: backtrace: (null):0 ((null)) 0xffffffffffffffff
2026-04-05T05:16:15.696Z BROKEN hsmd: STATUS_FAIL_INTERNAL_ERROR: FATAL SIGNAL

This is in STDERR

lightning_hsmd: bitcoin/psbt.c:329: psbt_input_add_pubkey: Assertion `wally_err == WALLY_OK' failed.
lightning_hsmd: FATAL SIGNAL 6 (version v25.12.1-modded)
0x57aa6ede9c8d send_backtrace
common/daemon.c:38
0x57aa6ede9d29 crashdump
common/daemon.c:83
0x763356c4532f ???
./signal/../sysdeps/unix/sysv/linux/x86_64/libc_sigaction.c:0
0x763356c9eb2c __pthread_kill_implementation
./nptl/pthread_kill.c:44
0x763356c9eb2c __pthread_kill_internal
./nptl/pthread_kill.c:78
0x763356c9eb2c __GI___pthread_kill
./nptl/pthread_kill.c:89
0x763356c4527d __GI_raise
../sysdeps/posix/raise.c:26
0x763356c288fe __GI_abort
./stdlib/abort.c:79
0x763356c2881a __assert_fail_base
./assert/assert.c:96
0x763356c3b516 __assert_fail
./assert/assert.c:105
0x57aa6edfdf87 psbt_input_add_pubkey
bitcoin/psbt.c:329
0x57aa6ede706f sign_our_inputs
hsmd/libhsmd.c:582
0x57aa6ede71b5 handle_sign_withdrawal_tx
hsmd/libhsmd.c:1408
0x57aa6ede75df hsmd_handle_client_message
hsmd/libhsmd.c:2274
0x57aa6edd9adb handle_client
hsmd/hsmd.c:809
0x57aa6ee0b23d next_plan
ccan/ccan/io/io.c:60
0x57aa6ee0b70e do_plan
ccan/ccan/io/io.c:422
0x57aa6ee0b7cb io_ready
ccan/ccan/io/io.c:439
0x57aa6ee0d1d9 io_loop
ccan/ccan/io/poll.c:470
0x57aa6edd9e74 main
hsmd/hsmd.c:894
0x763356c2a1c9 __libc_start_call_main
../sysdeps/nptl/libc_start_call_main.h:58
0x763356c2a28a __libc_start_main_impl
../csu/libc-start.c:360
0x57aa6edd8714 ???
_start+0x24:0
0xffffffffffffffff ???
???:0
lightning_hsmd: FATAL SIGNAL (version v25.12.1-modded)
0x57aa6ede9c8d send_backtrace
common/daemon.c:38
0x57aa6edeeecb status_failed
common/status.c:207
0x57aa6edef009 status_backtrace_exit
common/subdaemon.c:18
0x57aa6ede9d37 crashdump
common/daemon.c:87
0x763356c4532f ???
./signal/../sysdeps/unix/sysv/linux/x86_64/libc_sigaction.c:0
0x763356c9eb2c __pthread_kill_implementation
./nptl/pthread_kill.c:44
0x763356c9eb2c __pthread_kill_internal
./nptl/pthread_kill.c:78
0x763356c9eb2c __GI___pthread_kill
./nptl/pthread_kill.c:89
0x763356c4527d __GI_raise
../sysdeps/posix/raise.c:26
0x763356c288fe __GI_abort
./stdlib/abort.c:79
0x763356c2881a __assert_fail_base
./assert/assert.c:96
0x763356c3b516 __assert_fail
./assert/assert.c:105
0x57aa6edfdf87 psbt_input_add_pubkey
bitcoin/psbt.c:329
0x57aa6ede706f sign_our_inputs
hsmd/libhsmd.c:582
0x57aa6ede71b5 handle_sign_withdrawal_tx
hsmd/libhsmd.c:1408
0x57aa6ede75df hsmd_handle_client_message
hsmd/libhsmd.c:2274
0x57aa6edd9adb handle_client
hsmd/hsmd.c:809
0x57aa6ee0b23d next_plan
ccan/ccan/io/io.c:60
0x57aa6ee0b70e do_plan
ccan/ccan/io/io.c:422
0x57aa6ee0b7cb io_ready
ccan/ccan/io/io.c:439
0x57aa6ee0d1d9 io_loop
ccan/ccan/io/poll.c:470
0x57aa6edd9e74 main
hsmd/hsmd.c:894
0x763356c2a1c9 __libc_start_call_main
../sysdeps/nptl/libc_start_call_main.h:58
0x763356c2a28a __libc_start_main_impl
../csu/libc-start.c:360
0x57aa6edd8714 ???
_start+0x24:0

Now, I'm unable to start my node, it dies with STDERR same as above, and the lnlog showing

2026-04-05T05:33:19.901Z UNUSUAL jsonrpc#80: That's weird: Request signpsbt took 11574 milliseconds

Could it be that my hsmd some how got corrupted ? But it died at the moment I tried to open the channel. Could it be that there's some problematic outputs that could crash my node when used.

Note that I'm running it on a pruned btc node, but I never run into this kind of error before even the inputs that I used to open channels are very old.

If it's the channel opening that is the cause of the crash, is it possible to remove the attempt to keep my node running ?

PS. it's a legacy format of hsmd
PS. I turned on debug log it shows:

2026-04-05T06:52:29.062Z UNUSUAL plugin-spenderp: Failed signpsbt for waiting channel 9f5cde36c42e8bf525a01ae570569ae81ee8f2ac70aaaa2c9351afa092e1bc0d: {"code":-32602,"message":"HSM gave bad sign_withdrawal_reply "}
2026-04-05T06:52:29.083Z DEBUG hsmd: Client: Received message 28 from client
2026-04-05T06:52:29.083Z DEBUG hsmd: Client: Received message 28 from client
2026-04-05T06:52:29.083Z DEBUG hsmd: Client: Received message 28 from client
2026-04-05T06:52:29.083Z DEBUG hsmd: Client: Received message 28 from client

[btweenthebars]

I am able to resume my node by running with --disable-plugin=spenderp , is it safe to run without spenderp ? as long as I won't open more channel.

And, is this the command "lightning-cli openchannel_abort 9f5cde36c42e8bf525a01ae570569ae81ee8f2ac70aaaa2c9351afa092e1bc0d" to clear up the problematic opening ?

[btweenthebars]

so I ran the openchannel_abort but if failed with

{
   "code": 312,
   "message": "Channel open not in progress"
}

I had to modify the db directly by deleting the last row in table "channels" containing the troublesome psbt and the last row in "penalty_bases" linking to the row in "channels", and unreserved those inputs to get my node back normal, I hope.. .

I think the likely cause is probably the psbt is too large due to too many inputs, but CLN should handle it better than crashing the node. Ideally, it should try to sign the psbt before putting anything into db or reserving utxo. If node is unable to start due to spenderp, there should be a warning on the log suggesting to run with the disable flag for the time being.