### Description
We are using kamailio as P-CSCF and its time 2 time crashing only on
production Envoirnmnet with sig11 and sig6.
### Troubleshooting
As my little understanding, issue is with core/timer.c for signal 11 crash and
ims_qos for sig6.
Reproduction
Issue only occour on our Production envoirnmnet. I dont have reproduction steps.
Debugging Data
Sig 11
```
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/usr/local/sbin/kamailio -f
/usr/local/etc/kamailio_pcscf/kamailio.cfg -P /var/'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0 0x006a16fc in timer_list_expire (t=1339518316, h=0x7facee484fd0,
slow_l=0x7facee488208, slow_mark=7936) at core/timer.c:846
846 _timer_rm_list(tl); /* detach */
(gdb) bt
#0 0x006a16fc in timer_list_expire (t=1339518316, h=0x7facee484fd0,
slow_l=0x7facee488208, slow_mark=7936) at core/timer.c:846
#1 0x006a1c19 in timer_handler () at core/timer.c:922
#2 0x006a20ba in timer_main () at core/timer.c:961
#3 0x0042ac0a in main_loop () at main.c:1753
#4 0x0043400c in main (argc=13, argv=0x7ffc256fe358) at main.c:2856
(gdb) bt full
#0 0x006a16fc in timer_list_expire (t=1339518316, h=0x7facee484fd0,
slow_l=0x7facee488208, slow_mark=7936) at core/timer.c:846
tl = 0x7facf048e1b8
ret = 0
#1 0x006a1c19 in timer_handler () at core/timer.c:922
saved_ticks = 1339518316
run_slow_timer = 0
i = 768
__FUNCTION__ = "timer_handler"
#2 0x006a20ba in timer_main () at core/timer.c:961
No locals.
#3 0x0042ac0a in main_loop () at main.c:1753
i = 32
pid = 0
si = 0x0
si_desc = "udp receiver child=31 sock=10.161.224.211:5060", '\000'
,
"\354\325K\346\060\375\350\003\000\000\000\314\000\000\000\365k\000\000\000\000\000\000P\272A\000\000\000\000\000P\343o%\374\177",
'\000' ,
"\320\335o%\374\177\000\000\215\006Z\000\000\000\000"
nrprocs = 32
woneinit = 1
__FUNCTION__ = "main_loop"
#4 0x0043400c in main (argc=13, argv=0x7ffc256fe358) at main.c:2856
cfg_stream = 0x2674010
c = -1
r = 0
tmp = 0x7ffc256fff2c ""
tmp_len = 32685
port = -1767840736
proto = 32685
ahost = 0x0
aport = 0
options = 0x7e2058
":f:cm:M:dVIhEeb:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:x:X:Y:"
ret = -1
seed = 1101782887
rfd = 4
debug_save = 0
debug_flag = 0
dont_fork_cnt = 0
n_lst = 0x7fad96a1d5f7
p = 0x7fad96a0e77c "free"
st = {st_dev = 17, st_ino = 15237, st_nlink = 2, st_mode = 16877,
st_uid = 105, st_gid = 112, __pad0 = 0, st_rdev = 0, st_size = 120, st_blksize
= 4096, st_blocks = 0, st_atim = {
tv_sec = 160756, tv_nsec = 1}, st_mtim = {tv_sec =
1607002632, tv_nsec = 71600}, st_ctim = {tv_sec = 1607003887, tv_nsec =
4400}, __glibc_reserved = {0, 0, 0}}
tbuf =
"\000\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000\210'Ö\255\177\000\000\030\207\241\226\255\177\000\000\000\000\000\000\000\000\000\000\220\340o%\374\177\000\000`\261w%\374\177\000\000\240\341o%\374\177\000\000رw%\374\177\000\000\220\341o%\374\177\000\000\000\000\000\000\000\000\000\000<\177\241\226\255\177\000\000\000\000\000\000\000\000\000\000.N=\366\000\000\000\000\004\000\000\000\000\000\000\000\006\000\000\000\000\000\000\000\250u\302\226\255\177\000\000\266\210\241\226\255\177",
'\000' ,
"\341o%\374\177\000\000\060=\362\225\255\177\000\000\020\342o%\374\177\000\000\370\001\363\225\255\177\000\000\070\365\330\003\000\000\000\000\000\342o%\374\177\000\000\350*Ö"...
option_index = 0
long_options = {{name = 0x7e424f "help", has_arg = 0, flag = 0x0, val =
104}, {name = 0x7df854 "version", has_arg = 0, flag = 0x0, val = 118}, {name =
0x7e4254 "alias", has_arg = 1,
flag = 0x0, val = 1024}, {name = 0x7e425a "subst", has_arg = 1,
flag = 0x0, val = 1025}, {name = 0x7e4260 "substdef", has_arg = 1, flag = 0x0,
val = 1026}, {
name = 0x7e4269 "substdefs", has_arg = 1, flag = 0x0, val = 1027},
{name = 0x7e4273 "server-id", has_arg = 1, flag = 0x0, val = 1028}, {name =
0x7e427d "loadmodule", has_arg = 1,
flag = 0x0, val = 1029}, {name = 0x7e4288 "modparam", has_arg = 1,
flag = 0x0, val = 1030}, {name = 0x7e4291 "log-engine", has_arg = 1, flag =
0x0, val = 1031}, {
name = 0x7e429c "debug", has_arg = 1, flag = 0x0, val = 1032},
{name = 0x0, has_arg = 0, flag = 0x0, val = 0}}
__FUNCTION__ = "main"
(gdb)
```
Sig 6:
```
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/usr/local/sbin/kamailio -f
/usr/local/etc/kamailio_pcscf/kamailio.cfg -P /var/'.
Program terminated with signal SIGABRT, Aborted.
#0 0x7fad95f56c37 in raise () from
