.
Thread 3 (LWP 2182):
#0  0x00007fa0d3e0549f in __GI_ppoll (fds=<optimized out>, nfds=<optimized out>, timeout=<optimized out>, sigmask=sigmask@entry=0x0) at ../sysdeps/unix/sysv/linux/ppoll.c:57
        resultvar = 18446744073709551102
        oldtype = 0
        tval = {tv_sec = 37768592, tv_nsec = 38332208}
        result = <optimized out>
#1  0x00007fa0d55415d0 in ppoll (__ss=0x0, __timeout=<optimized out>, __nfds=<optimized out>, __fds=<optimized out>) at /usr/include/x86_64-linux-gnu/bits/poll2.h:77
No locals.
#2  pa_rtpoll_run (p=0x248e730, wait_op=wait_op@entry=true) at pulsecore/rtpoll.c:314
        ts = {tv_sec = 0, tv_nsec = 0}
        i = <optimized out>
        r = 0
        timeout = {tv_sec = 0, tv_usec = 0}
        __func__ = "pa_rtpoll_run"
        __PRETTY_FUNCTION__ = "pa_rtpoll_run"
#3  0x00007fa0ce836253 in thread_func (userdata=0x248e4c0) at modules/alsa/alsa-source.c:1527
        ret = <optimized out>
        rtpoll_sleep = 0
        real_sleep = <optimized out>
        u = 0x248e4c0
        revents = 0
        __func__ = "thread_func"
        __PRETTY_FUNCTION__ = "thread_func"
#4  0x00007fa0d52eeee8 in internal_thread_func (userdata=0x24d76d0) at pulsecore/thread-posix.c:83
        t = 0x24d76d0
#5  0x00007fa0d47f6f6e in start_thread (arg=0x7fa0cd807700) at pthread_create.c:311
        __res = <optimized out>
        pd = 0x7fa0cd807700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140328619243264, 8390806316868314141, 0, 140328755273824, 140328736655136, 4096, -8416177793071963107, -8416232519528864739}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = 0
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
        __PRETTY_FUNCTION__ = "start_thread"
#6  0x00007fa0d3e11e2d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
No locals.
.
Thread 2 (LWP 2181):
#0  0x00007fa0d3e0549f in __GI_ppoll (fds=<optimized out>, nfds=<optimized out>, timeout=<optimized out>, sigmask=sigmask@entry=0x0) at ../sysdeps/unix/sysv/linux/ppoll.c:57
        resultvar = 18446744073709551102
        oldtype = 0
        tval = {tv_sec = 140328191396384, tv_nsec = 37993168}
        result = <optimized out>
#1  0x00007fa0d55415d0 in ppoll (__ss=0x0, __timeout=<optimized out>, __nfds=<optimized out>, __fds=<optimized out>) at /usr/include/x86_64-linux-gnu/bits/poll2.h:77
No locals.
#2  pa_rtpoll_run (p=0x243bad0, wait_op=wait_op@entry=true) at pulsecore/rtpoll.c:314
        ts = {tv_sec = 0, tv_nsec = 0}
        i = <optimized out>
        r = 0
        timeout = {tv_sec = 0, tv_usec = 0}
        __func__ = "pa_rtpoll_run"
        __PRETTY_FUNCTION__ = "pa_rtpoll_run"
#3  0x00007fa0ce82fde3 in thread_func (userdata=0x250a5d0) at modules/alsa/alsa-sink.c:1816
        ret = <optimized out>
        rtpoll_sleep = 0
        real_sleep = <optimized out>
        u = 0x250a5d0
        revents = 0
        __func__ = "thread_func"
        __PRETTY_FUNCTION__ = "thread_func"
#4  0x00007fa0d52eeee8 in internal_thread_func (userdata=0x24d7950) at pulsecore/thread-posix.c:83
        t = 0x24d7950
#5  0x00007fa0d47f6f6e in start_thread (arg=0x7fa0ce008700) at pthread_create.c:311
        __res = <optimized out>
        pd = 0x7fa0ce008700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140328627635968, 8390806316868314141, 0, 140328755273824, 140328736655136, 4096, -8416174494000208867, -8416232519528864739}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = 0
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
        __PRETTY_FUNCTION__ = "start_thread"
#6  0x00007fa0d3e11e2d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
No locals.
.
Thread 1 (LWP 2174):
#0  pa_idxset_string_hash_func (p=0x25e1960) at pulsecore/idxset.c:67
        hash = 0
        c = 0x25e1960 <Address 0x25e1960 out of bounds>
#1  0x00007fa0d52cc256 in remove_entry (h=h@entry=0x25b3080, e=0x24790d0) at pulsecore/hashmap.c:93
        hash = <optimized out>
        __func__ = "remove_entry"
        __PRETTY_FUNCTION__ = "remove_entry"
#2  0x00007fa0d52cc884 in pa_hashmap_remove_all (h=h@entry=0x25b3080, free_cb=0x7fa0c2fb13f0 <pa_dbusiface_card_profile_free>) at pulsecore/hashmap.c:203
        data = 0x24102a0
        __func__ = "pa_hashmap_remove_all"
        __PRETTY_FUNCTION__ = "pa_hashmap_remove_all"
#3  0x00007fa0d52cc912 in pa_hashmap_free (h=0x25b3080, free_cb=<optimized out>) at pulsecore/hashmap.c:107
        __func__ = "pa_hashmap_free"
        __PRETTY_FUNCTION__ = "pa_hashmap_free"
#4  0x00007fa0c2fb07b2 in pa_dbusiface_card_free (c=c@entry=0x23f95d0) at modules/dbus/iface-card.c:553
        __func__ = "pa_dbusiface_card_free"
        __PRETTY_FUNCTION__ = "pa_dbusiface_card_free"
#5  0x00007fa0c2fb8d8a in subscription_cb (core=<optimized out>, t=<optimized out>, idx=<optimized out>, userdata=0x2508120) at modules/dbus/iface-core.c:1678
        c = 0x2508120
        card_iface = 0x23f95d0
        device_iface = 0x0
        stream_iface = 0x0
        sample_iface = 0x0
        module_iface = 0x0
        client_iface = 0x0
        signal_msg = 0x7fa0c8017870
        object_path = 0x2418200 "/org/pulseaudio/core1/card9"
        new_fallback_sink = 0x0
        new_fallback_source = 0x0
        __func__ = "subscription_cb"
        __PRETTY_FUNCTION__ = "subscription_cb"
#6  0x00007fa0d55346ff in defer_cb (m=<optimized out>, de=<optimized out>, userdata=0x23ad540) at pulsecore/core-subscribe.c:174
        e = 0x2498d50
        c = 0x23ad540
        s = 0x2487c40
        __func__ = "defer_cb"
        __PRETTY_FUNCTION__ = "defer_cb"
#7  0x00007fa0d5081c8a in dispatch_defer (m=0x23ad370) at pulse/mainloop.c:682
        e = 0x23bbf50
        r = 1
#8  pa_mainloop_dispatch (m=m@entry=0x23ad370) at pulse/mainloop.c:895
        dispatched = 0
        __func__ = "pa_mainloop_dispatch"
        __PRETTY_FUNCTION__ = "pa_mainloop_dispatch"
#9  0x00007fa0d5081eea in pa_mainloop_iterate (m=m@entry=0x23ad370, block=block@entry=1, retval=retval@entry=0x7fff0ae4e1d8) at pulse/mainloop.c:935
        r = <optimized out>
        __func__ = "pa_mainloop_iterate"
        __PRETTY_FUNCTION__ = "pa_mainloop_iterate"
#10 0x00007fa0d5081f90 in pa_mainloop_run (m=m@entry=0x23ad370, retval=retval@entry=0x7fff0ae4e1d8) at pulse/mainloop.c:950
        r = <optimized out>
#11 0x0000000000406e82 in main (argc=<optimized out>, argv=<optimized out>) at daemon/main.c:1150
        c = 0x23ad540
        buf = <optimized out>
        conf = 0x23a7fd0
        mainloop = 0x23ad370
        s = <optimized out>
        configured_address = 0x23ad540 "\002"
        r = <optimized out>
        retval = 0
        d = 3
        ltdl_init = true
        passed_fd = <optimized out>
        e = <optimized out>
        daemon_pipe = {-1, -1}
        daemon_pipe2 = {-1, -1}
        pid_monitor = 0x23aa910
        autospawn_fd = -1
        autospawn_locked = false
        server_lookup = 0x23b73e0
        lookup_service_bus = 0x23effe0
        server_bus = 0x23effe0
        start_server = <optimized out>
        __func__ = "main"
        __PRETTY_FUNCTION__ = "main"