[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `/usr/sbin/asterisk -f -vvvg -c'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x00007fdde8bd6485 in cancel (ht=0x2b010c0, entry=0x21, flags=7) at ../src/pj/timer.c:331
331	  if (entry->_timer_id < 0 || (pj_size_t)entry->_timer_id > ht->max_size) {
[Current thread is 1 (Thread 0x7fdce8214700 (LWP 99357))]
#0  0x00007fdde8bd6485 in cancel (ht=0x2b010c0, entry=0x21, flags=7) at ../src/pj/timer.c:331
        timer_node_slot = 45093056
#1  0x00007fdde8bd6a00 in cancel_timer (ht=0x2b010c0, entry=0x21, flags=6, id_val=0) at ../src/pj/timer.c:581
        count = 32733
#2  0x00007fdde8bd6ab2 in pj_timer_heap_cancel_if_active (ht=0x2b010c0, entry=0x21, id_val=0) at ../src/pj/timer.c:605
#3  0x00007fddb4872152 in endpt_send_request (endpoint=endpoint@entry=0x3e720f8, tdata=tdata@entry=0x7fdca466d5d8, timeout=timeout@entry=3000, token=token@entry=0x7fdcc46b25c8, cb=0x7fddb48721c0 <send_request_cb>) at res_pjsip.c:3623
        timers_cancelled = <optimized out>
        errmsg = "Operation not permitted\000\000\000\000\000\000\000\000\000\060\325f\244\334\177\000\000\000\000\000\000\000\000\000\000\004\000\000\000\005\000\000\000\360\225\331\003\000\000\000\000\360:!\350\334\177\000\000\031\354E\000\000\000\000"
        req_wrapper = 0x7fdcc470dcf0
        ret_val = 120001
        endpt = 0x2b00dd8
        selector = {type = PJSIP_TPSELECTOR_TRANSPORT, u = {transport = 0x3de7af8, listener = 0x3de7af8, ptr = 0x3de7af8}}
#4  0x00007fddb48747f8 in ast_sip_send_out_of_dialog_request (tdata=0x7fdca466d5d8, endpoint=endpoint@entry=0x3e720f8, timeout=3000, token=token@entry=0x3d99608, callback=callback@entry=0x7fddb4877df0 <qualify_contact_cb>) at res_pjsip.c:3743
        supplement = 0x0
        contact = 0x3d99608
        __PRETTY_FUNCTION__ = "ast_sip_send_out_of_dialog_request"
#5  0x00007fddb4877b1a in qualify_contact (endpoint=endpoint@entry=0x0, contact=contact@entry=0x3d99608) at res_pjsip/pjsip_options.c:444
        tdata = 0x7fdca466d5d8
        endpoint_local = 0x3e720f8
        __PRETTY_FUNCTION__ = "qualify_contact"
#6  0x00007fddb4877d93 in qualify_contact_task (obj=0x3d99608) at res_pjsip/pjsip_options.c:519
        contact = 0x3d99608
        res = <optimized out>
#7  0x00000000005eea7f in ast_taskprocessor_execute (tps=0x2a6c140) at taskprocessor.c:965
        local = {local_data = 0x7fdce8214700, data = 0x5f6202 <ast_threadstorage_set_ptr+60>}
        t = 0x7fdc9c2598a0
        size = 44482880
        __PRETTY_FUNCTION__ = "ast_taskprocessor_execute"
#8  0x00000000005f8634 in execute_tasks (data=0x2a6c140) at threadpool.c:1322
        tps = 0x2a6c140
#9  0x00000000005eea7f in ast_taskprocessor_execute (tps=0x2a6cfb0) at taskprocessor.c:965
        local = {local_data = 0x7fdce8213c80, data = 0x2a79fa0}
        t = 0x7fdc9c150510
        size = 44539864
        __PRETTY_FUNCTION__ = "ast_taskprocessor_execute"
#10 0x00000000005f68e9 in threadpool_execute (pool=0x2a79ff0) at threadpool.c:351
        __PRETTY_FUNCTION__ = "threadpool_execute"
#11 0x00000000005f7fa0 in worker_active (worker=0x7fdcd8002cd0) at threadpool.c:1105
        alive = 0
#12 0x00000000005f7d58 in worker_start (arg=0x7fdcd8002cd0) at threadpool.c:1024
        worker = 0x7fdcd8002cd0
        saved_state = (unknown: 32732)
        __PRETTY_FUNCTION__ = "worker_start"
#13 0x000000000060421b in dummy_start (data=0x7fdcd8003050) at utils.c:1235
        __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {0, -369544320498262348, 140590251502207, 140586764027648, 507904, 507904, -369544320523428172, 389224809969229492}, __mask_was_saved = 0}}, __pad = {0x7fdce8213df0, 0x0, 0x7fdce8214b68, 0x7fdde6be2438 <__pthread_keys+344>}}
        __cancel_routine = 0x452890 <ast_unregister_thread>
        __cancel_arg = 0x7fdce8214700
        __not_first_call = 0
        ret = 0x7fdde5fc18d8
        a = {start_routine = 0x5f7cd1 <worker_start>, data = 0x7fdcd8002cd0, name = 0x7fdcd8003130 "worker_start         started at [ 1079] threadpool.c worker_thread_start()"}
#14 0x00007fdde69d061a in start_thread () at /lib64/libpthread.so.0
#15 0x00007fdde5d0c5fd in clone () at /lib64/libc.so.6



Thread 1 (Thread 0x7fdce8214700 (LWP 99357)):
#0  0x00007fdde8bd6485 in cancel (ht=0x2b010c0, entry=0x21, flags=7) at ../src/pj/timer.c:331
#1  0x00007fdde8bd6a00 in cancel_timer (ht=0x2b010c0, entry=0x21, flags=6, id_val=0) at ../src/pj/timer.c:581
#2  0x00007fdde8bd6ab2 in pj_timer_heap_cancel_if_active (ht=0x2b010c0, entry=0x21, id_val=0) at ../src/pj/timer.c:605
#3  0x00007fddb4872152 in endpt_send_request (endpoint=endpoint@entry=0x3e720f8, tdata=tdata@entry=0x7fdca466d5d8, timeout=timeout@entry=3000, token=token@entry=0x7fdcc46b25c8, cb=0x7fddb48721c0 <send_request_cb>) at res_pjsip.c:3623
#4  0x00007fddb48747f8 in ast_sip_send_out_of_dialog_request (tdata=0x7fdca466d5d8, endpoint=endpoint@entry=0x3e720f8, timeout=3000, token=token@entry=0x3d99608, callback=callback@entry=0x7fddb4877df0 <qualify_contact_cb>) at res_pjsip.c:3743
#5  0x00007fddb4877b1a in qualify_contact (endpoint=endpoint@entry=0x0, contact=contact@entry=0x3d99608) at res_pjsip/pjsip_options.c:444
#6  0x00007fddb4877d93 in qualify_contact_task (obj=0x3d99608) at res_pjsip/pjsip_options.c:519
#7  0x00000000005eea7f in ast_taskprocessor_execute (tps=0x2a6c140) at taskprocessor.c:965
#8  0x00000000005f8634 in execute_tasks (data=0x2a6c140) at threadpool.c:1322
#9  0x00000000005eea7f in ast_taskprocessor_execute (tps=0x2a6cfb0) at taskprocessor.c:965
#10 0x00000000005f68e9 in threadpool_execute (pool=0x2a79ff0) at threadpool.c:351
#11 0x00000000005f7fa0 in worker_active (worker=0x7fdcd8002cd0) at threadpool.c:1105
#12 0x00000000005f7d58 in worker_start (arg=0x7fdcd8002cd0) at threadpool.c:1024
#13 0x000000000060421b in dummy_start (data=0x7fdcd8003050) at utils.c:1235
#14 0x00007fdde69d061a in start_thread () at /lib64/libpthread.so.0
#15 0x00007fdde5d0c5fd in clone () at /lib64/libc.so.6