hello all today we experience an issue in a kamailio when we saw some issue trying to free a sip transaction it seems Oct 4 09:28:35 tyo-proxy2 /usr/local/kamailio/sbin/kamailio[174859]: : <core> [core/mem/q_malloc.c:469]: qm_free(): BUG: qm_free: bad pointer 0x3463636562393730 (out of memory block!) called from tm: h_table.c: free_cell_helper(187) - aborting Oct 4 09:28:36 tyo-proxy2 /usr/local/kamailio/sbin/kamailio[174879]: CRITICAL: <core> [core/pass_fd.c:277]: receive_fd(): EOF on 37 Oct 4 09:28:36 tyo-proxy2 /usr/local/kamailio/sbin/kamailio[174832]: ALERT: <core> [main.c:743]: handle_sigs(): child process 174859 exited by a signal 6 Oct 4 09:28:36 tyo-proxy2 /usr/local/kamailio/sbin/kamailio[174832]: ALERT: <core> [main.c:746]: handle_sigs(): core was generated Oct 4 09:28:36 tyo-proxy2 /usr/local/kamailio/sbin/kamailio[174832]: INFO: <core> [main.c:768]: handle_sigs(): terminating due to SIGCHLD here you have the backtrace of the core (gdb) #0 0x00007fb7cfe461d7 in raise () from /lib64/libc.so.6 #1 0x00007fb7cfe478c8 in abort () from /lib64/libc.so.6 #2 0x0000000000660056 in qm_free (qmp=0x7fb709b42000, p=0x3863316638663636, file=0x7fb7ce044dd6 "tm: h_table.c", func=0x7fb7ce045080 <__FUNCTION__.10977> "free_cell_helper", line=187, mname=0x7fb7ce0447d0 "tm") at core/mem/q_malloc.c:471 #3 0x00007fb7cdf74529 in free_cell_helper (dead_cell=0x7fb7abe40eb0, silent=0, fname=0x7fb7ce0627e0 "timer.c", fline=651) at h_table.c:187 #4 0x00007fb7cdfff369 in wait_handler (ti=995094357, wait_tl=0x7fb7abe40f30, data=0x7fb7abe40eb0) at timer.c:651 #5 0x00000000004b0b15 in timer_list_expire (t=995094357, h=0x7fb709bc0c58, slow_l=0x7fb709bc3ae0, slow_mark=26309) at core/timer.c:874 #6 0x00000000004b0f79 in timer_handler () at core/timer.c:939 #7 0x00000000004b1419 in timer_main () at core/timer.c:978 #8 0x0000000000423234 in main_loop () at main.c:1697 #9 0x0000000000429dcd in main (argc=13, argv=0x7ffed3d33788) at main.c:2646 (gdb) bt ful #0 0x00007fb7cfe461d7 in raise () from /lib64/libc.so.6 No symbol table info available. #1 0x00007fb7cfe478c8 in abort () from /lib64/libc.so.6 No symbol table info available. #2 0x0000000000660056 in qm_free (qmp=0x7fb709b42000, p=0x3863316638663636, file=0x7fb7ce044dd6 "tm: h_table.c", func=0x7fb7ce045080 <__FUNCTION__.10977> "free_cell_helper", line=187, mname=0x7fb7ce0447d0 "tm") at core/mem/q_malloc.c:471 qm = 0x7fb709b42000 f = 0x7fb71f11eba8 size = 552 next = 0x7ffed3d330f0 prev = 0x7fb7ce024c51 <run_trans_callbacks+124> __FUNCTION__ = "qm_free" #3 0x00007fb7cdf74529 in free_cell_helper (dead_cell=0x7fb7abe40eb0, silent=0, fname=0x7fb7ce0627e0 "timer.c", fline=651) at h_table.c:187 b = 0x0 i = 1 rpl = 0x7fb7cf193ef0 tt = 0x7ffed3d331f0 foo = 0x100000000 cbs = 0x0 cbs_tmp = 0x7fb70a4f62f0 __FUNCTION__ = "free_cell_helper" #4 0x00007fb7cdfff369 in wait_handler (ti=995094357, wait_tl=0x7fb7abe40f30, data=0x7fb7abe40eb0) at timer.c:651 p_cell = 0x7fb7abe40eb0 ret = 0 #5 0x00000000004b0b15 in timer_list_expire (t=995094357, h=0x7fb709bc0c58, slow_l=0x7fb709bc3ae0, slow_mark=26309) at core/timer.c:874 tl = 0x7fb7abe40f30 ret = 0 #6 0x00000000004b0f79 in timer_handler () at core/timer.c:939 saved_ticks = 995094357 run_slow_timer = 0 i = 709 __FUNCTION__ = "timer_handler" #7 0x00000000004b1419 in timer_main () at core/timer.c:978 No locals. #8 0x0000000000423234 in main_loop () at main.c:1697 i = 8 pid = 0 si = 0x0 si_desc = "udp receiver child=7 sock=87.237.82.76:5060\000\267\177\000\000\360\063\323\323\376\177\000\000\341\304e\000\000\000\000\000@yA\000\000\000\000\000ȶ\267\t\267\177\000\000\000\000\000\000\000\000\000\000\340\020\025Ϸ\177\000\000@4\323\323\376\177\000\000\017\213f\000\000\000\000\000\260Ju\000\000\000\000\000UF\356_o\000\000" nrprocs = 8 woneinit = 1 __FUNCTION__ = "main_loop" #9 0x0000000000429dcd in main (argc=13, argv=0x7ffed3d33788) at main.c:2646 cfg_stream = 0xdae010 c = -1 r = 0 tmp = 0x7ffed3d34f25 "" tmp_len = 0 port = 0 proto = 0 options = 0x734958 ":f:cm:M:dVIhEeb:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:x:X:Y:" ret = -1 seed = 3992879128 rfd = 4 debug_save = 0 debug_flag = 0 dont_fork_cnt = 0 n_lst = 0x7ffed3d33640 ---Type <return> to continue, or q <return> to quit--- p = 0x7fb7cfeb18bd <intel_check_word+173> "H\205\300t\025\017\266P\003\017\266\312D9\371\017\204", <incomplete sequence \316> st = {st_dev = 19, st_ino = 33728, st_nlink = 2, st_mode = 16832, st_uid = 1001, st_gid = 1001, __pad0 = 0, st_rdev = 0, st_size = 300, st_blksize = 4096, st_blocks = 0, st_atim = {tv_sec = 1502352827, tv_nsec = 921620311}, st_mtim = {tv_sec = 1505400353, tv_nsec = 950483654}, st_ctim = {tv_sec = 1505400396, tv_nsec = 678439390}, __unused = {0, 0, 0}} __FUNCTION__ = "main" (gdb) frame 4 #4 0x00007fb7cdfff369 in wait_handler (ti=995094357, wait_tl=0x7fb7abe40f30, data=0x7fb7abe40eb0) at timer.c:651 651 UNREF_FREE(p_cell); (gdb) p *p_cell $25 = {next_c = 0x0, prev_c = 0x0, hash_index = 2893, label = 1369668607, flags = 4132, nr_of_outgoings = 2, ref_count = {val = 0}, from = { s = 0x7fb71863203b "From: <sip:+8801884038854@125.22.112.12;user=phone>;tag=59D4A891-3602563D-AC1C5C0E\r\nTo: \"+971569252742\" <sip:+971569252742@87.237.82.72;user=phone>;tag=caK9N5Na0HNXH\r\nCall-ID: aef5eaee-a8e5-11e7-9764-"..., len = 84}, callid = { s = 0x7fb7186320e2 "Call-ID: aef5eaee-a8e5-11e7-9764-b96367f6cc42\r\nCSeq: 1 BYE\r\nSupported: timer\r\nMax-Forwards: 68\r\nReason: Q.850 ;cause=16 ;text=\"Normal call clearing\"\r\nContent-Length: 0\r\nRoute: <sip:87.237.82.72;lr=on;"..., len = 47}, cseq_n = { s = 0x7fb718632111 "CSeq: 1 BYE\r\nSupported: timer\r\nMax-Forwards: 68\r\nReason: Q.850 ;cause=16 ;text=\"Normal call clearing\"\r\nContent-Length: 0\r\nRoute: <sip:87.237.82.72;lr=on;ftag=caK9N5Na0HNXH;did=61b.969a>\r\n\r\n", len = 7}, to = { s = 0x7fb71863208f "To: \"+971569252742\" <sip:+971569252742@87.237.82.72;user=phone>;tag=caK9N5Na0HNXH\r\nCall-ID: aef5eaee-a8e5-11e7-9764-b96367f6cc42\r\nCSeq: 1 BYE\r\nSupported: timer\r\nMax-Forwards: 68\r\nReason: Q.850 ;cause="..., len = 83}, method = { s = 0x7fb718631fb8 "BYE sip:971569252742@87.237.83.72:5080 SIP/2.0\r\nVia: SIP/2.0/UDP 125.22.112.12:5060;branch=z9hG4bKhvkkq0202gqhhk4sl041sd0000g00.1\r\nFrom: <sip:+8801884038854@125.22.112.12;user=phone>;tag=59D4A891-3602"..., len = 3}, tmcb_hl = {first = 0x7fb734f46910, reg_types = 131714}, wait_timer = {next = 0x0, prev = 0x0, expire = 995094345, initial_timeout = 80, data = 0x7fb7abe40eb0, f = 0x7fb7cdfff2b6 <wait_handler>, flags = 513, slow_idx = 0}, uas = {request = 0x7fb7186318c8, end_request = 0x7fb7186329b8 "\300\300\300\300", response = {activ_type = 481, flags = 128, t_active = 0 '\000', branch = 0, buffer_len = 517, buffer = 0x7fb7647fab88 "SIP/2.0 481 Call Does Not Exist\r\nVia: SIP/2.0/UDP 125.22.112.12:5060;branch=z9hG4bKhvkkq0202gqhhk4sl041sd0000g00.1\r\nFrom: <sip:+8801884038854@125.22.112.12;user=phone>;tag=59D4A891-3602563D-AC1C5C0E\r\n"..., my_T = 0x7fb7abe40eb0, timer = {next = 0x0, prev = 0x0, expire = 0, initial_timeout = 0, data = 0x0, f = 0x7fb7cdffed8a <retr_buf_handler>, flags = 0, slow_idx = 0}, dst = {send_sock = 0x7fb7cee66788, to = {s = { sa_family = 2, sa_data = "\023\304}\026p\f\000\000\000\000\000\000\000"}, sin = {sin_family = 2, sin_port = 50195, sin_addr = {s_addr = 208672381}, sin_zero = "\000\000\000\000\000\000\000"}, sin6 = {sin6_family = 2, sin6_port = 50195, sin6_flowinfo = 208672381, sin6_addr = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, sin6_scope_id = 0}}, id = 0, proto = 1 '\001', send_flags = {f = 0 '\000', blst_imask = 0 '\000'}}, retr_expire = 0, fr_expire = 0}, local_totag = {s = 0x0, len = 0}, cancel_reas = 0x0, status = 481}, uac = 0x7fb7abe410b8, async_backup = { backup_route = 1, backup_branch = 4294967295, blind_uac = 0, ruri_new = 1}, fwded_totags = 0x0, uri_avps_from = 0x0, uri_avps_to = 0x0, user_avps_from = 0x0, user_avps_to = 0x0, domain_avps_from = 0x0, domain_avps_to = 0x0, xavps_list = 0x0, reply_mutex = {val = 0}, reply_locker_pid = {val = 0}, reply_rec_lock_level = 0, fr_timeout = 480, fr_inv_timeout = 1920, rt_t1_timeout_ms = 650, rt_t2_timeout_ms = 4000, end_of_life = 995094709, relayed_reply_branch = 1, on_failure = 0, on_branch_failure = 0, on_reply = 0, on_branch = 0, on_branch_delayed = 0, md5 = 0x7fb7abe41098 "adfe93b19dfeb65381f6a9144bf1b0e9"} (gdb) frame 3 #3 0x00007fb7cdf74529 in free_cell_helper (dead_cell=0x7fb7abe40eb0, silent=0, fname=0x7fb7ce0627e0 "timer.c", fline=651) at h_table.c:187 187 sip_msg_free_unsafe(rpl); (gdb) p *rpl $26 = {id = 793790803, pid = 540028466, tval = {tv_sec = 8462656578208149556, tv_usec = 7308613580334855013}, fwd_send_flags = {f = 111 'o', blst_imask = 117 'u'}, rpl_send_flags = {f = 116 't', blst_imask = 13 '\r'}, first_line = {type = 8250, flags = 18771, len = 775040848, u = {request = {method = {s = 0x3738205044552f30 <Address 0x3738205044552f30 out of bounds>, len = 926102062}, uri = { s = 0x636e6172623b3237 <Address 0x636e6172623b3237 out of bounds>, len = 964312424}, version = {s = 0x39332e636338654b <Address 0x39332e636338654b out of bounds>, len = 1664496945}, method_value = 878863157}, reply = { version = {s = 0x3738205044552f30 <Address 0x3738205044552f30 out of bounds>, len = 926102062}, status = {s = 0x636e6172623b3237 <Address 0x636e6172623b3237 out of bounds>, len = 964312424}, reason = { s = 0x39332e636338654b <Address 0x39332e636338654b out of bounds>, len = 1664496945}, statuscode = 878863157}}}, via1 = 0x3364636462323865, via2 = 0x302e353838623234, headers = 0x53203a6169560a0d, last_header = 0x552f302e322f5049, parsed_flag = 3689061859469578308, h_via1 = 0x3b32372e32382e37, h_via2 = 0x7a3d68636e617262, callid = 0x38654b6234476839, to = 0x37393663352e6363, cseq = 0x6535613738373339, from = 0x6336666237316130, contact = 0x3231353933353432, maxforwards = 0x560a0d302e366232, route = 0x2f504953203a6169, record_route = 0x205044552f302e32, content_type = 0x382e3733322e3738, content_length = 0x6172623b32372e32, authorization = 0x4768397a3d68636e, expires = 0x2e636338654b6234, proxy_auth = 0x3465633231636336, supported = 0x3230623761643335, require = 0x3566356130333333, proxy_require = 0x3864303335346234, unsupported = 0x3a6169560a0d302e, allow = 0x302e322f50495320, event = 0x2e3738205044552f, accept = 0x372e32382e373332, accept_language = 0x68636e6172623b32, organization = 0x4b62344768397a3d, priority = 0x3565612e63633865, subject = 0x6461316136346538, user_agent = 0x3239643035353036, server = 0x6562653237353264, content_disposition = 0xd302e3866616138, diversion = 0x4953203a6169560a, rpid = 0x44552f302e322f50, refer_to = 0x3733322e37382050, session_expires = 0x623b32372e32382e, min_se = 0x397a3d68636e6172, sipifmatch = 0x6338654b62344768, subscription_state = 0x6332626363392e63, date = 0x6339613134333566, identity = 0x3936353363343934, identity_info = 0x6338383864636536, pai = 0x69560a0d302e3639, ppi = 0x322f504953203a61, path = 0x38205044552f302e, privacy = 0x32382e3733322e37, min_expires = 0x6e6172623b32372e, body = 0x344768397a3d6863, eoh = 0x632e636338654b62 <Address 0x632e636338654b62 out of bounds>, unparsed = 0x3339316133646337 <Address 0x3339316133646337 out of bounds>, rcv = {src_ip = {af = 1630613603, len = 959854384, u = {addrl = { 3977350488200209462, 3329677872489128505}, addr32 = {879125558, 926049074, 909206073, 775251042}, addr16 = {25654, 13414, 25394, 14130, 25145, 13873, 25698, 11829}, addr = "6df42c279b16bd5."}}, dst_ip = { af = 1443499312, len = 540696937, u = {addrl = {3400268511741757779, 3615888265024914517}, addr32 = {793790803, 791686706, 542131285, 841889592}, addr16 = {18771, 12112, 11826, 12080, 17493, 8272, 14136, 12846}, addr = "SIP/2.0/UDP 87.2"}}, src_port = 14131, dst_port = 14382, proto_reserved1 = 842477106, proto_reserved2 = 1634886203, src_su = {s = {sa_family = 25454, sa_data = "h=z9hG4bKe8cc."}, sin = {sin_family = 25454, sin_port = 15720, sin_addr = {s_addr = 1198012794}, sin_zero = "4bKe8cc."}, sin6 = {sin6_family = 25454, sin6_port = 15720, sin6_flowinfo = 1198012794, sin6_addr = {__in6_u = {__u6_addr8 = "4bKe8cc.13d79438", __u6_addr16 = {25140, 25931, 25400, 11875, 13105, 14180, 13369, 14387}, __u6_addr32 = {1699439156, 778265400, 929313585, 942879801}}}, sin6_scope_id = 1680879928}}, bind_address = 0x3239306139373563, proto = 102 'f'}, buf = 0xa0d302e64376563 <Address 0xa0d302e64376563 out of bounds>, len = 979462486, new_uri = {s = 0x5044552f302e322f <Address 0x5044552f302e322f out of bounds>, len = 775370784}, dst_uri = { s = 0x72623b32372e3238 <Address 0x72623b32372e3238 out of bounds>, len = 1751346785}, parsed_uri_ok = 1264727111, parsed_uri = {user = {s = 0x613161333937642e <Address 0x613161333937642e out of bounds>, len = 943219557}, passwd = {s = 0x6164643739663937 <Address 0x6164643739663937 out of bounds>, len = 828455217}, host = {s = 0x6169560a0d302e66 <Address 0x6169560a0d302e66 out of bounds>, len = 1230184506}, port = { s = 0x3738205044552f30 <Address 0x3738205044552f30 out of bounds>, len = 926102062}, params = {s = 0x636e6172623b3237 <Address 0x636e6172623b3237 out of bounds>, len = 964312424}, sip_params = { s = 0x63622e636338654b <Address 0x63622e636338654b out of bounds>, len = 808609078}, headers = {s = 0x6432346339396636 <Address 0x6432346339396636 out of bounds>, len = 845296434}, port_no = 12643, proto = 12646, type = 808346165, flags = (URI_USER_NORMALIZE | unknown: 1767246348), transport = {s = 0x552f302e322f5049 <Address 0x552f302e322f5049 out of bounds>, len = 941641796}, ttl = { s = 0x3b32372e32382e37 <Address 0x3b32372e32382e37 out of bounds>, len = 1851880034}, user_param = {s = 0x38654b6234476839 <Address 0x38654b6234476839 out of bounds>, len = 959341411}, maddr = { s = 0x6432663738626633 <Address 0x6432663738626633 out of bounds>, len = 845296945}, method = {s = 0x6530396537303332 <Address 0x6530396537303332 out of bounds>, len = 775239991}, lr = { s = 0x2f504953203a6169 <Address 0x2f504953203a6169 out of bounds>, len = 791686706}, r2 = {s = 0x382e3733322e3738 <Address 0x382e3733322e3738 out of bounds>, len = 842477106}, gr = { s = 0x4768397a3d68636e <Address 0x4768397a3d68636e out of bounds>, len = 1699439156}, transport_val = {s = 0x3037313336323438 <Address 0x3037313336323438 out of bounds>, len = 912406072}, ttl_val = { s = 0x6466616633366533 <Address 0x6466616633366533 out of bounds>, len = 942695731}, user_param_val = {s = 0x3a6169560a0d302e <Address 0x3a6169560a0d302e out of bounds>, len = 1346982688}, maddr_val = { s = 0x2e3738205044552f <Address 0x2e3738205044552f out of bounds>, len = 775369522}, method_val = {s = 0x68636e6172623b32 <Address 0x68636e6172623b32 out of bounds>, len = 1748597309}, lr_val = { s = 0x6532622e63633865 <Address 0x6532622e63633865 out of bounds>, len = 892560439}, r2_val = {s = 0x3462613963313564 <Address 0x3462613963313564 out of bounds>, len = 842491188}, gr_val = { s = 0xd302e3332393430 <Address 0xd302e3332393430 out of bounds>, len = 1634293258}}, parsed_orig_ruri_ok = 775040848, parsed_orig_ruri = {user = {s = 0x3733322e37382050 <Address 0x3733322e37382050 out of bounds>, len = 775043118}, passwd = {s = 0x397a3d68636e6172 <Address 0x397a3d68636e6172 out of bounds>, len = 1647593320}, host = {s = 0x3036306533392e63 <Address 0x3036306533392e63 out of bounds>, len = 808739637}, port = { s = 0x6430303434316430 <Address 0x6430303434316430 out of bounds>, len = 962998329}, params = {s = 0x69560a0d302e3732 <Address 0x69560a0d302e3732 out of bounds>, len = 1394621025}, sip_params = { s = 0x38205044552f302e <Address 0x38205044552f302e out of bounds>, len = 858926647}, headers = {s = 0x6e6172623b32372e <Address 0x6e6172623b32372e out of bounds>, len = 2050844771}, port_no = 19298, proto = 14437, type = 909009763, flags = (unknown: 878850356), transport = {s = 0x3737663362366332 <Address 0x3737663362366332 out of bounds>, len = 811689014}, ttl = {s = 0x2e32646465633366 <Address 0x2e32646465633366 out of bounds>, len = 1443499312}, user_param = {s = 0x2f302e322f504953 <Address 0x2f302e322f504953 out of bounds>, len = 542131285}, maddr = {s = 0x32372e32382e3733 <Address 0x32372e32382e3733 out of bounds>, len = 1634886203}, method = { s = 0x654b62344768397a <Address 0x654b62344768397a out of bounds>, len = 778265400}, lr = {s = 0x3463643430313264 <Address 0x3463643430313264 out of bounds>, len = 1684156466}, r2 = { s = 0x6139313961373064 <Address 0x6139313961373064 out of bounds>, len = 809002294}, gr = {s = 0x504953203a616956 <Address 0x504953203a616956 out of bounds>, len = 808333871}, transport_val = { s = 0x2e3733322e373820 <Address 0x2e3733322e373820 out of bounds>, len = 925774392}, ttl_val = {s = 0x68397a3d68636e61 <Address 0x68397a3d68636e61 out of bounds>, len = 1264727111}, user_param_val = { s = 0x336239313030662e <Address 0x336239313030662e out of bounds>, len = 1714436451}, maddr_val = {s = 0x3639343462666465 <Address 0x3639343462666465 out of bounds>, len = 1647731768}, method_val = { s = 0x6169560a0d302e65 <Address 0x6169560a0d302e65 out of bounds>, len = 1230184506}, lr_val = {s = 0x3738205044552f30 <Address 0x3738205044552f30 out of bounds>, len = 926102062}, r2_val = { s = 0x636e6172623b3237 <Address 0x636e6172623b3237 out of bounds>, len = 964312424}, gr_val = {s = 0x32342e636338654b <Address 0x32342e636338654b out of bounds>, len = 1681404473}}, add_rm = 0x3863316638663636, body_lumps = 0x3633623765633361, reply_lump = 0x302e326136636130, add_to_branch_s = "\r\nVia: SIP/2.0/UDP 87.237.82.72;branch=z9hG4bKe8cc.f34debd", add_to_branch_len = 909522273, hash_index = 1664628533, msg_flags = 959656752, flags = 1680947555, set_global_address = {s = 0x560a0d302e646164 <Address 0x560a0d302e646164 out of bounds>, len = 540696937}, set_global_port = {s = 0x205044552f302e32 <Address 0x205044552f302e32 out of bounds>, len = 841889592}, force_send_socket = 0x6172623b32372e32, path_vec = {s = 0x4768397a3d68636e <Address 0x4768397a3d68636e out of bounds>, len = 1699439156}, instance = { s = 0x3061653066303834 <Address 0x3061653066303834 out of bounds>, len = 962738483}, reg_id = 1714840422, ruid = {s = 0x3762376465303565 <Address 0x3762376465303565 out of bounds>, len = 168636462}, location_ua = { s = 0x302e322f50495320 <Address 0x302e322f50495320 out of bounds>, len = 1346655535}, ldv = {flow = {decoded = 775369522, rcv = {src_ip = {af = 1919040306, len = 1751346785, u = {addrl = {5431961581858159165, 7233118750862686309}, addr32 = {1748597309, 1264727111, 1667446885, 1684091694}, addr16 = {31293, 26681, 13383, 19298, 14437, 25443, 13102, 25697}, addr = "=z9hG4bKe8cc.3ad"}}, dst_ip = {af = 1681024055, len = 1714447409, u = {addrl = {4049126615781303909, 3544439805141410918}, addr32 = {809068133, 942760756, 959800422, 825254201}, addr16 = {26213, 12345, 25396, 14385, 25702, 14645, 24889, 12592}, addr = "ef904c18fd599a01"}}, src_port = 12855, dst_port = 14640, proto_reserved1 = 221261363, proto_reserved2 = 1634293258, src_su = {s = {sa_family = 8250, sa_data = "SIP/2.0/UDP 87"}, sin = {sin_family = 8250, sin_port = 18771, sin_addr = {s_addr = 775040848}, sin_zero = "0/UDP 87"}, sin6 = {sin6_family = 8250, sin6_port = 18771, sin6_flowinfo = 775040848, sin6_addr = {__in6_u = {__u6_addr8 = "0/UDP 87.237.82.", __u6_addr16 = {12080, 17493, 8272, 14136, 12846, 14131, 14382, 11826}, __u6_addr32 = {1146433328, 926425168, 926102062, 775043118}}}, sin6_scope_id = 1648046647}}, bind_address = 0x397a3d68636e6172, proto = 104 'h'}}}} (gdb) frame 2 #2 0x0000000000660056 in qm_free (qmp=0x7fb709b42000, p=0x3863316638663636, file=0x7fb7ce044dd6 "tm: h_table.c", func=0x7fb7ce045080 <__FUNCTION__.10977> "free_cell_helper", line=187, mname=0x7fb7ce0447d0 "tm") at core/mem/q_malloc.c:471 471 abort(); (gdb) frame 1 #1 0x00007fb7cfe478c8 in abort () from /lib64/libc.so.6 (gdb) could you please check if you find any clue? just some secs before we started to receive some requests which caused a loop in our proxy (SIP requests to the proxy without To tag and no Route headers) maybe that could be related consuming the memory ¿? we are running kamailio 5.0.2 best regards david