(gdb) bt
#0  0x00182bc6 in _int_malloc () from /lib/tls/libc.so.6
#1  0x00181ecd in malloc () from /lib/tls/libc.so.6
#2  0x080b8ace in ast_var_assign (name=0x246180 "\001", value=0x45adf24 "3500") at chanvars.c:46
#3  0x0808839f in pbx_builtin_setvar_helper (chan=0x0, name=0x45adf18 "targetqueue", value=0x45adf24 "3500") at pbx.c:5824
#4  0x0808851a in pbx_builtin_setvar (chan=0xb7100e60, data=0x45adf18) at pbx.c:5869
#5  0x0808b79f in pbx_extension_helper (c=0xb7100e60, con=0x2461c8, context=0xb7100fb0 "queues", exten=0xb71010a4 "3500", priority=1, label=0x0,
    callerid=0x8f9ee08 "SetVar", action=0) at pbx.c:563
#6  0x0808c404 in __ast_pbx_run (c=0xb7100e60) at pbx.c:2180
#7  0x080898b8 in ast_pbx_run (c=0xb7100e60) at pbx.c:2499
#8  0x004aa0db in ss_thread (data=0xb7100e60) at chan_zap.c:6058
#9  0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#10 0x001ed93a in clone () from /lib/tls/libc.so.6
(gdb) bt full
#0  0x00182bc6 in _int_malloc () from /lib/tls/libc.so.6
No symbol table info available.
#1  0x00181ecd in malloc () from /lib/tls/libc.so.6
No symbol table info available.
#2  0x080b8ace in ast_var_assign (name=0x246180 "\001", value=0x45adf24 "3500") at chanvars.c:46
        var = (struct ast_var_t *) 0x1
        len = 2381976
#3  0x0808839f in pbx_builtin_setvar_helper (chan=0x0, name=0x45adf18 "targetqueue", value=0x45adf24 "3500") at pbx.c:5824
        newvariable = (struct ast_var_t *) 0x0
        headp = (struct varshead *) 0xb7101228
#4  0x0808851a in pbx_builtin_setvar (chan=0xb7100e60, data=0x45adf18) at pbx.c:5869
        name = 0x45adf18 "targetqueue"
        value = 0x2461c8 ""
        argc = 1
        argv = {0x45adf18 "targetqueue", 0x0 <repeats 23 times>}
        global = 0
        x = 0
#5  0x0808b79f in pbx_extension_helper (c=0xb7100e60, con=0x2461c8, context=0xb7100fb0 "queues", exten=0xb71010a4 "3500", priority=1, label=0x0,
    callerid=0x8f9ee08 "SetVar", action=0) at pbx.c:563
        e = (struct ast_exten *) 0x0
        sw = (struct ast_switch *) 0x0
        data = 0x0
        foundcontext = 0xb7100fb0 "queues"
        newstack = 1
        res = 0
        status = 5
        incstack = {0x343b3633 <Address 0x343b3633 out of bounds>, 0x65526d30 <Address 0x65526d30 out of bounds>, 0x6e6f7073 <Address 0x6e6f7073 out of bounds>,
  0x69546573 <Address 0x69546573 out of bounds>, 0x756f656d <Address 0x756f656d out of bounds>, 0x305b1b74 <Address 0x305b1b74 out of bounds>,
  0x3b37333b <Address 0x3b37333b out of bounds>, 0x286d3034 <Address 0x286d3034 out of bounds>, 0x17e294 "\201Ã\004v\f", 0x3b35333b <Address 0x3b35333b out of bounds>,
  0x5a6d3034 <Address 0x5a6d3034 out of bounds>, 0x245898 "¤G\023", 0x45b4220 "\001\200­ûPC[\004PC[\004PC[\004PC[\004nC[\004\237C[\004PC[\004\237C[\004",
  0x45b41fc "\fC[\004ô\212\027", 0x17f795 "\213E\024\211~\020\211~\f\205À\211~\004t+\213U\024\213Mð\211V\024\211N\030\211V\b1ÿ\211¾\230",
  0x45b4220 "\001\200­ûPC[\004PC[\004PC[\004PC[\004nC[\004\237C[\004PC[\004\237C[\004", 0x45b4350 "\"THOMAS DAVID J \" <8157843232>", 0x45b439f "", 0x0,
  0x15516f "\201Ã)\a\017", 0x245898 "¤G\023", 0x45b4220 "\001\200­ûPC[\004PC[\004PC[\004PC[\004nC[\004\237C[\004PC[\004\237C[\004", 0x80edc6f "ut",
  0x45b430c "(C[\004tÞ\025", 0x178af4 "\213\215\fÿÿÿ\211Â9\2150ÿÿÿt\t\213µ(ÿÿÿÆ\006",
  0x45b4220 "\001\200­ûPC[\004PC[\004PC[\004PC[\004nC[\004\237C[\004PC[\004\237C[\004", 0x80edc6f "ut", 0x45b4344 "`abcdefghijk\"THOMAS DAVID J \" <8157843232>",
  0x45b4350 "\"THOMAS DAVID J \" <8157843232>", 0x0, 0x45b42c0 "' (language 'en')\n  == CDR updated on Zap/8-1\n",
  0x45b4220 "\001\200­ûPC[\004PC[\004PC[\004PC[\004nC[\004\237C[\004PC[\004\237C[\004", 0xfbad8001 <Address 0xfbad8001 out of bounds>,
  0x45b4350 "\"THOMAS DAVID J \" <8157843232>", 0x45b4350 "\"THOMAS DAVID J \" <8157843232>", 0x45b4350 "\"THOMAS DAVID J \" <8157843232>",
  0x45b4350 "\"THOMAS DAVID J \" <8157843232>", 0x45b436e "", 0x45b439f "", 0x45b4350 "\"THOMAS DAVID J \" <8157843232>", 0x45b439f "", 0x0, 0x0, 0x0, 0x0, 0x0,
  0x333b315b <Address 0x333b315b out of bounds>, 0x0, 0x70615a6d <Address 0x70615a6d out of bounds>, 0x31000000 <Address 0x31000000 out of bounds>, 0x0,
  0x343b3733 <Address 0x343b3733 out of bounds>, 0x2c226d30 <Address 0x2c226d30 out of bounds>, 0x5b1b2220 <Address 0x5b1b2220 out of bounds>,
  0x35333b31 <Address 0x35333b31 out of bounds>, 0xffffffff <Address 0xffffffff out of bounds>, 0x74737563 <Address 0x74737563 out of bounds>,
  0x612f6d6f <Address 0x612f6d6f out of bounds>, 0x1b315f61 <Address 0x1b315f61 out of bounds>, 0x333b305b <Address 0x333b305b out of bounds>,
  0x30343b37 <Address 0x30343b37 out of bounds>, 0x2029226d <Address 0x2029226d out of bounds>, 0x6e206e69 <Address 0x6e206e69 out of bounds>,
  0x73207765 <Address 0x73207765 out of bounds>, 0x6b636174 <Address 0x6b636174 out of bounds>, 0x2020200a <Address 0x2020200a out of bounds>,
  0x202d2d20 <Address 0x202d2d20 out of bounds>, 0x79616c50 <Address 0x79616c50 out of bounds>, 0x20676e69 <Address 0x20676e69 out of bounds>, 0x2438a0 "", 0x0,
  0x315f6161 <Address 0x315f6161 out of bounds>, 0x6c282027 <Address 0x6c282027 out of bounds>, 0x75676e61 <Address 0x75676e61 out of bounds>,
  0x20656761 <Address 0x20656761 out of bounds>, 0x276e6527 <Address 0x276e6527 out of bounds>, 0x20200a29 <Address 0x20200a29 out of bounds>,
  0x43203d3d <Address 0x43203d3d out of bounds>, 0x75205244 <Address 0x75205244 out of bounds>, 0x74616470 <Address 0x74616470 out of bounds>,
  0x6f206465 <Address 0x6f206465 out of bounds>, 0x615a206e <Address 0x615a206e out of bounds>, 0x2d382f70 <Address 0x2d382f70 out of bounds>,
  0xa31 <Address 0xa31 out of bounds>,
  0x90a9ee0 "    -- Executing \033[1;36;40mGotoIfTime\033[0;37;40m(\"\033[1;35;40mZap/8-1\033[0;37;40m\", \"\033[1;35;40m9:30-18:00|sat|*|*?from-pstn-reghours|s|1:\033[0;37;40m\") in new stack\n    -- Executing \033[1;36;40mGotoIfTime\033[0;3"...,
---Type <return> to continue, or q <return> to quit---
  0x810e320 "    -- Executing \033[1;36;40mGotoIfTime\033[0;37;40m(\"\033[1;35;40mZap/8-1\033[0;37;40m\", \"\033[1;35;40m9:30-18:00|sat|*|*?from-pstn-reghours|s|1:\033[0;37;40m\") in new stack\n    -- Executing \033[1;36;40mGotoIfTime\033[0;3"..., 0x0, 0x178a4d "\201ÃKÎ\f", 0x245898 "¤G\023",
  0x90299c0 "\"THOpµ\n\tDAVID J \" <8157843232>", 0x902de58 "8157843232", 0x45b4328 "`\016\020·UÊ\t\bPC[\004P",
  0x15de74 "\213]ü\211ì]Ã\220\220\220\220\220U\211å\203ì\020\211]ü\213U\f\215M\020èI\207üÿ\201Ã\004z\016", 0x45b4350 "\"THOMAS DAVID J \" <8157843232>",
  0x50 <Address 0x50 out of bounds>, 0x80edc6f "ut", 0x45b433c "Ð5\005\tXÞ\002\t`abcdefghijk\"THOMAS DAVID J \" <8157843232>", 0x45b4411 "", 0xb7100e60 "Zap/8-1",
  0x809ca55 "", 0x45b4350 "\"THOMAS DAVID J \" <8157843232>", 0x50 <Address 0x50 out of bounds>, 0x80edc6f "ut", 0x90535d0 "THOMAS DAVID J ", 0x902de58 "8157843232",
  0x63626160 <Address 0x63626160 out of bounds>, 0x67666564 <Address 0x67666564 out of bounds>, 0x6b6a6968 <Address 0x6b6a6968 out of bounds>,
  0x4f485422 <Address 0x4f485422 out of bounds>, 0x2053414d <Address 0x2053414d out of bounds>, 0x49564144 <Address 0x49564144 out of bounds>,
  0x204a2044 <Address 0x204a2044 out of bounds>, 0x383c2022 <Address 0x383c2022 out of bounds>, 0x38373531 <Address 0x38373531 out of bounds>,
  0x33323334 <Address 0x33323334 out of bounds>, 0x3e32 <Address 0x3e32 out of bounds>, 0x0 <repeats 12 times>}
        passdata = "targetqueue=3500", '\0' <repeats 8175 times>
        stacklen = 0
        tmp = "\033[1;36;40mSetVar\033[0;37;40m\00040m\000;40m\000\005\000\000\000\000°Z·I\000\000\000¸\213ø\b\230\205ø\b8éø\bI\000\000\000´![\004>º\027\0008éø\b\000°Z·"
        tmp2 = "\033[1;35;40mZap/8-1\033[0;37;40m\000\001\200­û@%[\004@%[\004@%[\004@%[\004_%[\004?E[\004@%[\004?E[\004", '\0' <repeats 15 times>
        tmp3 = "\033[1;35;40mtargetqueue=3500\033[0;37;40m\0000m\000:2\033[0;37;40m\000|1:\033[0;37;40m", '\0' <repeats 1294 times>, "\033[1;35;40mhangupcall\033[0;37;40m\000;37;40m", '\0' <repeats 4130 times>, "kõ\026\000\000\000\000\000Tp\016\b\000\000\000\000rä\027\0000![\004\214hL\000kõ\026\000\000\000\000\000´hL\000\000\000\000\000è\034[\004¾d\025\000\f\035[\004´hL\000\001\000\000\000\200\030[\004", '\0' <repeats 12 times>...
        atmp = '\0' <repeats 79 times>
        atmp2 = "\020C[\004\234áZ\004 áZ\004¤áZ\004¨áZ\004¬áZ\004\006\000\000\000xàZ\004H \030", '\0' <repeats 13 times>, "ðMü\b J[\004X\217\002\t¨\024\b\bX\217\002\t\000\000\000\000\211Nü\b J[\004\001\000\000\000\000\000\000\000$Ýþ\b\004\000\000\000\020C[\004\234áZ\004 áZ\004¤áZ\004¨áZ\004¬áZ\004\001\000\000\000\001\000\000\000ØàZ\004", '\0' <repeats 12 times>, " \004\002\t J[\004X\217\002\t¨\024\b\bX\217\002\t\000\000\000\0007\005\002\t J[\004\001\000\000\000\000\000\000\000$Ýþ\b\004\000\000\000\020C[\004\234áZ\004 áZ\004¤"...
#6  0x0808c404 in __ast_pbx_run (c=0xb7100e60) at pbx.c:2180
        digit = 0
        exten = '\0' <repeats 255 times>
        pos = 0
        waittime = 73090064
        res = 0
#7  0x080898b8 in ast_pbx_run (c=0xb7100e60) at pbx.c:2499
        res = AST_PBX_SUCCESS
#8  0x004aa0db in ss_thread (data=0xb7100e60) at chan_zap.c:6058
        p = (struct zt_pvt *) 0x8fea148
        exten = '\0' <repeats 79 times>
        exten2 = '\0' <repeats 79 times>
        buf = "ÿÿÿÿý", 'ÿ' <repeats 11 times>, "ýÿ}ÿÿÿÿÿÿÿÿÿýÿÿÿý}ÿýÿýÿý}ÿÿÿÿÿÿÿÿ}ÿÿýýÿÿÿÿÿÿÿÿÿÿý", 'ÿ' <repeats 11 times>, "ýÿÿýýÿÿÿÿ}ÿÿ}ÿÿÿýýÿÿÿý}ÿýÿÿÿÿÿÿÿÿÿýý}ýÿÿýÿÿÿÿ}ÿÿ}ÿÿÿÿÿÿ}ÿÿÿÿýÿÿÿÿÿÿ}ÿýÿýýÿýÿÿÿÿÿÿÿ}ÿ", '\0' <repeats 28 times>, "\200J[\004âÏ\b\b\000\000\000\000\000\000\000\000\\ûí\000\020{í", '\0' <repeats 17 times>...
        dtmfcid = "\000\000\000\000\000\000\000\0003!è\0004\200\004\b\230X$\000\001\000\000\000ÀJ[\004ÐG[\004¡\213\023\000ÀJ[\004Ð÷ÿÿ\230X$\000ðG[\004D\213\023\000ÀJ[\004\001\000\000\000\000\000\000\000\\ûí\000\001\000\000\000ÀJ[\004\034H[\004L¶í\000ÀJ[\004\001\000\000\000\234<d\000áÏ\b\b\000P[\004\001\000\000\000\\ûí\000\005\000\000\000DI[\004\034I[\004\221Ed\000\001\000\000\000\032\000\000\000ÀJ[\004\000\000\000\000ÐM[\004DI[\004ÀJ[\004\002\000\000\000äÿÿÿTH[\004ÀJ[\0040µí", '\0' <repeats 120 times>
        dtmfbuf = "\230F[\004\225÷\027\000¼F[\004àG[\004/H[\004\000\000\000\000oQ\025\000\230X$\000¼F[\004`H[\004¨G[\004ô\212\027\000¼F[\004ÀZ\020\b\003H[\004àG[\004\000\000\000\000\\G[\004¼F[\004Û\016\"\000\230X$\000¸Z\020\bÀZ\020\b|G[\004È.\"\000\003\000\000\000\000\000\000\000ÀZ\020\bHG[\004\003\000\000\000\bßí\000\000\000\000\000áÏ\b\báÏ\b\b\000\000\000\000in n\001\000\000\000üÿÿÿ\001\000\000\000DG[\004\002ßí\000Pßí\000\003\000\000\000ÄZ\020\b\000\000\000\000\001\000\000\000ô\200\004\b37;40m(\"\033[1;"...
        cs = (struct callerid_state *) 0xb70cf008
        name = 0xb70ff41c <Address 0xb70ff41c out of bounds>
        number = 0xb70ff45c <Address 0xb70ff45c out of bounds>
        distMatches = 400
        curRingData = {324, 0, 0}
        receivedRingT = 1
        counter1 = 2384256
        counter = 538970731
        samples = 28160
        flags = 0
---Type <return> to continue, or q <return> to quit---
        i = 1
        timeout = -1223684512
        getforward = 0
        len = 0
        res = 150905160
#9  0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
No symbol table info available.
#10 0x001ed93a in clone () from /lib/tls/libc.so.6
No symbol table info available.
(gdb) thread apply all bt

Thread 21 (process 13976):
#0  0x00edba61 in __read_nocancel () from /lib/tls/libpthread.so.0
#1  0x080d0ed2 in read_char (el=0x8f88bd0, cp=0xbfffc567 "") at read.c:301
#2  0x080d0f72 in el_getc (el=0x8f88bd0, cp=0xbfffc567 "") at read.c:347
#3  0x080d0dde in read_getcmd (el=0x8f88bd0, cmdnum=0xfffffe00 <Address 0xfffffe00 out of bounds>, ch=0xbfffc567 "") at read.c:243
#4  0x080d1109 in el_gets (el=0x8f88bd0, nread=0xbfffc5cc) at read.c:443
#5  0x080b185e in main (argc=-1073756736, argv=0xbfffc8e4) at asterisk.c:2209

Thread 20 (process 22594):
#0  0x001e46cd in poll () from /lib/tls/libc.so.6
#1  0x080b58d4 in listener (unused=0x0) at asterisk.c:526
#2  0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#3  0x001ed93a in clone () from /lib/tls/libc.so.6

Thread 19 (process 22595):
#0  0x00edbc5e in accept () from /lib/tls/libpthread.so.0
#1  0x080adaea in accept_thread (ignore=0x0) at manager.c:1390
#2  0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#3  0x001ed93a in clone () from /lib/tls/libc.so.6

Thread 18 (process 22596):
#0  0x00ed926d in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0
#1  0x080c478e in do_devstate_changes (data=0x0) at devicestate.c:251
#2  0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#3  0x001ed93a in clone () from /lib/tls/libc.so.6

Thread 17 (process 22597):
#0  0x001e6c87 in ___newselect_nocancel () from /lib/tls/libc.so.6
#1  0x0067763a in do_monitor (data=0x0) at ../include/asterisk/channel.h:1032
#2  0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#3  0x001ed93a in clone () from /lib/tls/libc.so.6

Thread 16 (process 22598):
#0  0x00edba61 in __read_nocancel () from /lib/tls/libpthread.so.0
#1  0x00e4a505 in monmp3thread (data=0x8fa75d0) at res_musiconhold.c:493
#2  0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#3  0x001ed93a in clone () from /lib/tls/libc.so.6

Thread 15 (process 22600):
#0  0x001e6c87 in ___newselect_nocancel () from /lib/tls/libc.so.6
#1  0x002ca353 in do_parking_thread (ignore=0x0) at ../include/asterisk/channel.h:1032
#2  0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#3  0x001ed93a in clone () from /lib/tls/libc.so.6

Thread 14 (process 22601):
#0  0x001e46cd in poll () from /lib/tls/libc.so.6
#1  0x08054fd4 in ast_io_wait (ioc=0x8fc37f8, howlong=-4) at io.c:271
#2  0x00783eea in do_monitor (data=0x0) at chan_sip.c:10755
#3  0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#4  0x001ed93a in clone () from /lib/tls/libc.so.6

Thread 13 (process 22602):
---Type <return> to continue, or q <return> to quit---
#0  0x001e46cd in poll () from /lib/tls/libc.so.6
#1  0x08054fd4 in ast_io_wait (ioc=0x8fd4fd8, howlong=-4) at io.c:271
#2  0x002eb49a in do_monitor (data=0x0) at chan_mgcp.c:3456
#3  0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#4  0x001ed93a in clone () from /lib/tls/libc.so.6

Thread 12 (process 22604):
#0  0x001e46cd in poll () from /lib/tls/libc.so.6
#1  0x08054fd4 in ast_io_wait (ioc=0x8fd1968, howlong=-4) at io.c:271
#2  0x0030d05a in network_thread (ignore=0x0) at chan_iax2.c:7867
#3  0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#4  0x001ed93a in clone () from /lib/tls/libc.so.6

Thread 11 (process 22605):
#0  0x001e46cd in poll () from /lib/tls/libc.so.6
#1  0x08054fd4 in ast_io_wait (ioc=0x8fdbd88, howlong=-4) at io.c:271
#2  0x0044b43f in do_monitor (data=0x0) at chan_skinny.c:3032
#3  0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#4  0x001ed93a in clone () from /lib/tls/libc.so.6

Thread 10 (process 22606):
#0  0x001e6c87 in ___newselect_nocancel () from /lib/tls/libc.so.6
#1  0x004582ab in do_monitor (data=0x0) at ../include/asterisk/channel.h:1032
#2  0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#3  0x001ed93a in clone () from /lib/tls/libc.so.6

Thread 9 (process 22607):
#0  0x001e46cd in poll () from /lib/tls/libc.so.6
#1  0x004af0d7 in do_monitor (data=0x0) at chan_zap.c:6382
#2  0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#3  0x001ed93a in clone () from /lib/tls/libc.so.6

Thread 8 (process 22608):
#0  0x001ba83c in __nanosleep_nocancel () from /lib/tls/libc.so.6
#1  0x001ba65f in sleep () from /lib/tls/libc.so.6
#2  0x00f7f38c in scan_thread (unused=0x0) at pbx_spool.c:347
#3  0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#4  0x001ed93a in clone () from /lib/tls/libc.so.6

Thread 7 (process 22609):
#0  0x001e46cd in poll () from /lib/tls/libc.so.6
#1  0x08054fd4 in ast_io_wait (ioc=0x8f8ef38, howlong=-4) at io.c:271
#2  0x00ea8998 in network_thread (ignore=0x0) at pbx_dundi.c:2103
#3  0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#4  0x001ed93a in clone () from /lib/tls/libc.so.6

Thread 6 (process 22610):
#0  0x001ba83c in __nanosleep_nocancel () from /lib/tls/libc.so.6
#1  0x001ba65f in sleep () from /lib/tls/libc.so.6
#2  0x00ea8a5f in process_precache (ign=0x0) at pbx_dundi.c:2143
#3  0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#4  0x001ed93a in clone () from /lib/tls/libc.so.6

---Type <return> to continue, or q <return> to quit---
Thread 5 (process 22684):
#0  0x001e46cd in poll () from /lib/tls/libc.so.6
#1  0x080b6301 in netconsole (vconsole=0x8118b40) at asterisk.c:475
#2  0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#3  0x001ed93a in clone () from /lib/tls/libc.so.6

Thread 4 (process 22747):
#0  0x001e46cd in poll () from /lib/tls/libc.so.6
#1  0x0805fb08 in ast_waitfor_nandfds (c=0x1da0670, n=0, fds=0x0, nfds=0, exception=0x0, outfd=0x0, ms=0x1da066c) at channel.c:1276
#2  0x08065b9f in ast_waitfor_n (c=0xfffffffc, n=-4, ms=0xfffffffc) at channel.c:1346
#3  0x080b9fc4 in autoservice_run (ign=0x0) at autoservice.c:91
#4  0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#5  0x001ed93a in clone () from /lib/tls/libc.so.6

Thread 3 (process 23254):
#0  0x001e46cd in poll () from /lib/tls/libc.so.6
#1  0x0805fb08 in ast_waitfor_nandfds (c=0x70c3e30, n=2, fds=0x0, nfds=0, exception=0x0, outfd=0x0, ms=0x70c3e24) at channel.c:1276
#2  0x08066fcd in ast_generic_bridge (playitagain=0x70c3ec8, playit=0x70c3ecc, c0=0xb7100480, c1=0x9027890, config=0x70c4610, fo=0x70c3f78, rc=0x70c3f7c)
    at channel.c:1346
#3  0x08064502 in ast_channel_bridge (c0=0xb7100480, c1=0x9027890, config=0x70c4610, fo=0x70c3f78, rc=0x70c3f7c) at channel.c:3221
#4  0x002c7c89 in ast_bridge_call (chan=0xb7100480, peer=0x9027890, config=0x70c4610) at res_features.c:1315
#5  0x004f3efd in dial_exec_full (chan=0xb7100480, data=0x70c4610, peerflags=0x70c4e78) at app_dial.c:1647
#6  0x004f1c67 in dial_exec (chan=0xfffffffc, data=0xfffffffc) at app_dial.c:1687
#7  0x0808b79f in pbx_extension_helper (c=0xb7100480, con=0xfffffffc, context=0xb71005d0 "macro-dial", exten=0xb71006c4 "s", priority=10, label=0x0,
    callerid=0x8ffc108 "Dial", action=150550824) at pbx.c:563
#8  0x080896b7 in ast_spawn_extension (c=0xfffffffc, context=0xfffffffc <Address 0xfffffffc out of bounds>, exten=0xfffffffc <Address 0xfffffffc out of bounds>,
    priority=-4, callerid=0xfffffffc <Address 0xfffffffc out of bounds>) at pbx.c:2180
#9  0x0055291a in macro_exec (chan=0xb7100480, data=0x200) at app_macro.c:205
#10 0x0808b79f in pbx_extension_helper (c=0xb7100480, con=0xfffffffc, context=0xb71005d0 "macro-dial", exten=0xb71006c4 "s", priority=4, label=0x0,
    callerid=0x8f93928 "Macro", action=150550824) at pbx.c:563
#11 0x080896b7 in ast_spawn_extension (c=0xfffffffc, context=0xfffffffc <Address 0xfffffffc out of bounds>, exten=0xfffffffc <Address 0xfffffffc out of bounds>,
    priority=-4, callerid=0xfffffffc <Address 0xfffffffc out of bounds>) at pbx.c:2180
#12 0x0055291a in macro_exec (chan=0xb7100480, data=0x200) at app_macro.c:205
#13 0x0808b79f in pbx_extension_helper (c=0xb7100480, con=0xfffffffc, context=0xb71005d0 "macro-dial", exten=0xb71006c4 "s", priority=1, label=0x0,
    callerid=0x8f93928 "Macro", action=0) at pbx.c:563
#14 0x0808c404 in __ast_pbx_run (c=0xb7100480) at pbx.c:2180
#15 0x080898b8 in ast_pbx_run (c=0xb7100480) at pbx.c:2499
#16 0x004aa0db in ss_thread (data=0xb7100480) at chan_zap.c:6058
#17 0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#18 0x001ed93a in clone () from /lib/tls/libc.so.6

Thread 2 (process 23489):
#0  0x001e46cd in poll () from /lib/tls/libc.so.6
#1  0x0805fb08 in ast_waitfor_nandfds (c=0x2211d60, n=2, fds=0x0, nfds=0, exception=0x0, outfd=0x0, ms=0x2211d54) at channel.c:1276
#2  0x08066fcd in ast_generic_bridge (playitagain=0x2211df8, playit=0x2211dfc, c0=0xb711df38, c1=0x9093440, config=0x22120c0, fo=0x2211ea8, rc=0x2211eac)
    at channel.c:1346
#3  0x08064502 in ast_channel_bridge (c0=0xb711df38, c1=0x9093440, config=0x22120c0, fo=0x2211ea8, rc=0x2211eac) at channel.c:3221
#4  0x002c7c89 in ast_bridge_call (chan=0xb711df38, peer=0x9093440, config=0x22120c0) at res_features.c:1315
#5  0x00545859 in try_calling (qe=0x2212390, options=0x2212390 "Ð\031\002\tdefault", announceoverride=0x2212511 "", url=0x2212510 "", go_on=0x9093440)
    at app_queue.c:2186
#6  0x00540385 in queue_exec (chan=0xb711df38, data=0x2212510) at app_queue.c:2882
#7  0x0808b79f in pbx_extension_helper (c=0xb711df38, con=0xfffffffc, context=0xb711e088 "macro-queueable", exten=0xb711e17c "s", priority=5, label=0x0,
    callerid=0x8f917a0 "Queue", action=150550824) at pbx.c:563
---Type <return> to continue, or q <return> to quit---
#8  0x080896b7 in ast_spawn_extension (c=0xfffffffc, context=0xfffffffc <Address 0xfffffffc out of bounds>, exten=0xfffffffc <Address 0xfffffffc out of bounds>,
    priority=-4, callerid=0xfffffffc <Address 0xfffffffc out of bounds>) at pbx.c:2180
#9  0x0055291a in macro_exec (chan=0xb711df38, data=0x200) at app_macro.c:205
#10 0x0808b79f in pbx_extension_helper (c=0xb711df38, con=0xfffffffc, context=0xb711e088 "macro-queueable", exten=0xb711e17c "s", priority=4, label=0x0,
    callerid=0x8f93928 "Macro", action=0) at pbx.c:563
#11 0x0808c404 in __ast_pbx_run (c=0xb711df38) at pbx.c:2180
#12 0x080898b8 in ast_pbx_run (c=0xb711df38) at pbx.c:2499
#13 0x004aa0db in ss_thread (data=0xb711df38) at chan_zap.c:6058
#14 0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#15 0x001ed93a in clone () from /lib/tls/libc.so.6

Thread 1 (process 23535):
#0  0x00182bc6 in _int_malloc () from /lib/tls/libc.so.6
#1  0x00181ecd in malloc () from /lib/tls/libc.so.6
#2  0x080b8ace in ast_var_assign (name=0x246180 "\001", value=0x45adf24 "3500") at chanvars.c:46
#3  0x0808839f in pbx_builtin_setvar_helper (chan=0x0, name=0x45adf18 "targetqueue", value=0x45adf24 "3500") at pbx.c:5824
#4  0x0808851a in pbx_builtin_setvar (chan=0xb7100e60, data=0x45adf18) at pbx.c:5869
#5  0x0808b79f in pbx_extension_helper (c=0xb7100e60, con=0x2461c8, context=0xb7100fb0 "queues", exten=0xb71010a4 "3500", priority=1, label=0x0,
    callerid=0x8f9ee08 "SetVar", action=0) at pbx.c:563
#6  0x0808c404 in __ast_pbx_run (c=0xb7100e60) at pbx.c:2180
#7  0x080898b8 in ast_pbx_run (c=0xb7100e60) at pbx.c:2499
#8  0x004aa0db in ss_thread (data=0xb7100e60) at chan_zap.c:6058
#9  0x00ed6de8 in start_thread () from /lib/tls/libpthread.so.0
#10 0x001ed93a in clone () from /lib/tls/libc.so.6