assert (joinable) before joining threads; fix possible crash after cancelling jobs.