(gdb) bt
#0  0x00002b84866c60a2 in rawmemchr () from /lib/libc.so.6
#1  0x00002b84866bae70 in _IO_list_resetlock () from /lib/libc.so.6
#2  0x00002b84866b0b05 in vsscanf () from /lib/libc.so.6
#3  0x00002b84866ac378 in sscanf () from /lib/libc.so.6
#4  0x00002aaaad307e25 in func_header_read (chan=0x5e5890, function=0x0, data=0x406d28cb "TO", buf=0x406d18b0 "", len=4096) at chan_sip.c:10912
#5  0x000000000046f030 in pbx_substitute_variables_helper_full (c=0x5e5890, headp=0x5e5c78, cp1=0x0, cp2=0x406d7b10 "", count=8191) at pbx.c:1535
#6  0x000000000047286b in pbx_extension_helper (c=0x5e5890, con=0x5a0090, context=0x5e5ae0 "free_telecom_incoming", exten=0x5e5b30 "s", priority=1, label=0x0,
    callerid=0x5daf10 "0870380122", action=5501088) at pbx.c:1615
#7  0x000000000047397e in __ast_pbx_run (c=0x5e5890) at pbx.c:2161
#8  0x0000000000475309 in pbx_thread (data=0x0) at pbx.c:2472
#9  0x000000000049b065 in dummy_start (data=0x0) at utils.c:538
#10 0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#11 0x00002b848670cca3 in clone () from /lib/libc.so.6
#12 0x0000000000000000 in ?? ()

#######################################################################################################################

(gdb) bt full
#0  0x00002b84866c60a2 in rawmemchr () from /lib/libc.so.6
No symbol table info available.
#1  0x00002b84866bae70 in _IO_list_resetlock () from /lib/libc.so.6
No symbol table info available.
#2  0x00002b84866b0b05 in vsscanf () from /lib/libc.so.6
No symbol table info available.
#3  0x00002b84866ac378 in sscanf () from /lib/libc.so.6
No symbol table info available.
#4  0x00002aaaad307e25 in func_header_read (chan=0x5e5890, function=0x0, data=0x406d28cb "TO", buf=0x406d18b0 "", len=4096) at chan_sip.c:10912
        p = (struct sip_pvt *) 0x0
        content = 0x0
        args = {argc = 1, argv = 0x406d1858, header = 0x406d28cb "TO", number = 0x0}
        i = 0
        number = 0
        start = 0
        __PRETTY_FUNCTION__ = "func_header_read"
#5  0x000000000046f030 in pbx_substitute_variables_helper_full (c=0x5e5890, headp=0x5e5c78, cp1=0x0, cp2=0x406d7b10 "", count=8191) at pbx.c:1535
        cp4 = 0x0
        whereweare = 0x5a0081 ""
        length = 0
        offset = 0
        offset2 = 2147483647
        isfunction = 1
        workspace = 0x406d18b0 ""
        ltmp = 0x0
        var = 0x406d28c0 "SIP_HEADER"
        nextvar = 0x0
        nextexp = 0x1 <Address 0x1 out of bounds>
        vars = 0x1 <Address 0x1 out of bounds>
        vare = 0x4d9a87 "(null)"
        pos = 5085831
        brackets = 0
        needsub = 0
        __PRETTY_FUNCTION__ = "pbx_substitute_variables_helper_full"
#6  0x000000000047286b in pbx_extension_helper (c=0x5e5890, con=0x5a0090, context=0x5e5ae0 "free_telecom_incoming", exten=0x5e5b30 "s", priority=1, label=0x0,
    callerid=0x5daf10 "0870380122", action=5501088) at pbx.c:1615
        e = (struct ast_exten *) 0x5a0090
        res = 5898352
        q = {incstack = {0x0 <repeats 128 times>}, stacklen = 0, status = 5, swo = 0x0, data = 0x0, foundcontext = 0x5e5ae0 "free_telecom_incoming"}
        passdata = '\0' <repeats 8191 times>
        matching_action = 0
        __PRETTY_FUNCTION__ = "pbx_extension_helper"
#7  0x000000000047397e in __ast_pbx_run (c=0x5e5890) at pbx.c:2161
        dst_exten = '\0' <repeats 152 times>, "`\206\207\206\204+\000\000 �m@\000\000\000\000��m@\000\000\000\000$\f^\000\000\000\000\000 \f^\000\000\000\000\000 \000\000\000\000\000\000\000`\206\207\206\204+\000\000`b^\000\000\000\000\000\030\000\000\000\000\000\000\000�c^\000\000\000\000\000!�\001\000\000\000\000\000\000\020\000\000\000\000\000\000\221�k\206\204+\000"
        pos = 0
        digit = 0
        found = 1
        res = 6139664
        error = 0
        __PRETTY_FUNCTION__ = "__ast_pbx_run"
#8  0x0000000000475309 in pbx_thread (data=0x0) at pbx.c:2472
No locals.
#9  0x000000000049b065 in dummy_start (data=0x0) at utils.c:538
        __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {0, 0, 47848182259824, 1078762512, 4095, 4096, 1080926512, 4829253}, __mask_was_saved = 0}}, __pad = {0x406da200,
    0x0, 0x0, 0x0}}
        __cancel_arg = (void *) 0x406da960
        not_first_call = 0
        ret = (void *) 0x2b8485e82070
        a = {start_routine = 0x475300 <pbx_thread>, data = 0x5e5890, name = 0x5e6260 "pbx_thread", ' ' <repeats 11 times>, "started at [ 2496] pbx.c ast_pbx_start()"}
#10 0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#11 0x00002b848670cca3 in clone () from /lib/libc.so.6
No symbol table info available.
#12 0x0000000000000000 in ?? ()
No symbol table info available.

#################################################################################################################

(gdb) thread apply all bt
Thread 29 (process 4198):
#0  0x00002b8485e86fef in __read_nocancel () from /lib/libpthread.so.0
#1  0x000000000049ff66 in read_char ()
#2  0x00000000004ab260 in el_gets ()
#3  0x00000000004269ce in main (argc=618947536, argv=0x10660000) at asterisk.c:2718

Thread 28 (process 4200):
#0  0x00002b8486704d12 in poll () from /lib/libc.so.6
#1  0x0000000000421d1d in listener (unused=0x40040048) at asterisk.c:833
#2  0x000000000049b065 in dummy_start (data=0x40040048) at utils.c:538
#3  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#4  0x00002b848670cca3 in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 27 (process 4201):
#0  0x00002b8485e84a0a in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#1  0x0000000000444567 in do_devstate_changes (data=0x510404) at lock.h:694
#2  0x000000000049b065 in dummy_start (data=0x510404) at utils.c:538
#3  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#4  0x00002b848670cca3 in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 26 (process 4202):
#0  0x00002b8486706906 in select () from /lib/libc.so.6
#1  0x00002aaaabb1e726 in do_parking_thread (ignore=0x0) at channel.h:1267
#2  0x000000000049b065 in dummy_start (data=0x0) at utils.c:538
#3  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#4  0x00002b848670cca3 in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 25 (process 4203):
#0  0x00002b8486706906 in select () from /lib/libc.so.6
#1  0x00002aaaac88c92e in sound_thread (unused=0x9) at channel.h:1267
#2  0x000000000049b065 in dummy_start (data=0x9) at utils.c:538
#3  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#4  0x00002b848670cca3 in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 24 (process 4204):
#0  0x00002b8485e84a0a in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#1  0x00002aaaacca5c4b in iax2_process_thread (data=0x57dc84) at lock.h:694
#2  0x000000000049b065 in dummy_start (data=0x57dc84) at utils.c:538
#3  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#4  0x00002b848670cca3 in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 23 (process 4205):
#0  0x00002b8485e84a0a in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#1  0x00002aaaacca5c4b in iax2_process_thread (data=0x57ed94) at lock.h:694
#2  0x000000000049b065 in dummy_start (data=0x57ed94) at utils.c:538
#3  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#4  0x00002b848670cca3 in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 22 (process 4206):
#0  0x00002b8485e84a0a in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#1  0x00002aaaacca5c4b in iax2_process_thread (data=0x57fea4) at lock.h:694
#2  0x000000000049b065 in dummy_start (data=0x57fea4) at utils.c:538
#3  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#4  0x00002b848670cca3 in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 21 (process 4207):
#0  0x00002b8485e84a0a in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#1  0x00002aaaacca5c4b in iax2_process_thread (data=0x580fb4) at lock.h:694
#2  0x000000000049b065 in dummy_start (data=0x580fb4) at utils.c:538
#3  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#4  0x00002b848670cca3 in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 20 (process 4208):
#0  0x00002b8485e84a0a in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#1  0x00002aaaacca5c4b in iax2_process_thread (data=0x5820c4) at lock.h:694
#2  0x000000000049b065 in dummy_start (data=0x5820c4) at utils.c:538
#3  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#4  0x00002b848670cca3 in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 19 (process 4209):
#0  0x00002b8485e84a0a in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#1  0x00002aaaacca5c4b in iax2_process_thread (data=0x5831d4) at lock.h:694
#2  0x000000000049b065 in dummy_start (data=0x5831d4) at utils.c:538
#3  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#4  0x00002b848670cca3 in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 18 (process 4210):
#0  0x00002b8485e84a0a in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#1  0x00002aaaacca5c4b in iax2_process_thread (data=0x5842e4) at lock.h:694
#2  0x000000000049b065 in dummy_start (data=0x5842e4) at utils.c:538
#3  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#4  0x00002b848670cca3 in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 17 (process 4211):
#0  0x00002b8485e84a0a in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#1  0x00002aaaacca5c4b in iax2_process_thread (data=0x5853f4) at lock.h:694
#2  0x000000000049b065 in dummy_start (data=0x5853f4) at utils.c:538
#3  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#4  0x00002b848670cca3 in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 16 (process 4212):
#0  0x00002b8485e84a0a in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#1  0x00002aaaacca5c4b in iax2_process_thread (data=0x586504) at lock.h:694
#2  0x000000000049b065 in dummy_start (data=0x586504) at utils.c:538
#3  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#4  0x00002b848670cca3 in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 15 (process 4213):
#0  0x00002b8485e84a0a in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#1  0x00002aaaacca5c4b in iax2_process_thread (data=0x5876a4) at lock.h:694
#2  0x000000000049b065 in dummy_start (data=0x5876a4) at utils.c:538
#3  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#4  0x00002b848670cca3 in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 14 (process 4214):
#0  0x00002b8485e84bff in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#1  0x00002aaaacc93d2b in sched_thread (ignore=0x2aaaacdb9c44) at lock.h:699
#2  0x000000000049b065 in dummy_start (data=0x2aaaacdb9c44) at utils.c:538
#3  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#4  0x00002b848670cca3 in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()


Thread 13 (process 4215):
#0  0x00002b8486704d12 in poll () from /lib/libc.so.6
#1  0x0000000000454a3a in ast_io_wait (ioc=0x561c20, howlong=-4) at io.c:266
#2  0x00002aaaacc93f13 in network_thread (ignore=0x579ce0) at chan_iax2.c:8068
#3  0x000000000049b065 in dummy_start (data=0x579ce0) at utils.c:538
#4  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#5  0x00002b848670cca3 in clone () from /lib/libc.so.6
#6  0x0000000000000000 in ?? ()

Thread 12 (process 4216):
#0  0x00002b8486704d12 in poll () from /lib/libc.so.6
#1  0x0000000000454a3a in ast_io_wait (ioc=0x588810, howlong=-4) at io.c:266
#2  0x00002aaaad0d9d6a in do_monitor (data=0x588ab0) at chan_mgcp.c:3413
#3  0x000000000049b065 in dummy_start (data=0x588ab0) at utils.c:538
#4  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#5  0x00002b848670cca3 in clone () from /lib/libc.so.6
#6  0x0000000000000000 in ?? ()

Thread 11 (process 4217):
#0  0x00002b8486706906 in select () from /lib/libc.so.6
#1  0x00002aaaad1e2d99 in do_monitor (data=0x0) at channel.h:1267
#2  0x000000000049b065 in dummy_start (data=0x0) at utils.c:538
#3  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#4  0x00002b848670cca3 in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 10 (process 4218):
#0  0x00002b8486704d12 in poll () from /lib/libc.so.6
#1  0x0000000000454a3a in ast_io_wait (ioc=0x58b8e0, howlong=-4) at io.c:266
#2  0x00002aaaad32d7e7 in do_monitor (data=0x58b910) at chan_sip.c:14443
#3  0x000000000049b065 in dummy_start (data=0x58b910) at utils.c:538
#4  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#5  0x00002b848670cca3 in clone () from /lib/libc.so.6
#6  0x0000000000000000 in ?? ()

Thread 9 (process 4219):
#0  0x00002b8485e872df in __accept_nocancel () from /lib/libpthread.so.0
#1  0x00002aaaad55b6df in accept_thread (ignore=0x11) at chan_skinny.c:4044
#2  0x000000000049b065 in dummy_start (data=0x11) at utils.c:538
#3  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#4  0x00002b848670cca3 in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 8 (process 4220):
#0  0x00002b8486704d12 in poll () from /lib/libc.so.6
#1  0x00002aaaad67e4fd in do_monitor (data=0x594e90) at chan_zap.c:6741
#2  0x000000000049b065 in dummy_start (data=0x594e90) at utils.c:538
#3  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#4  0x00002b848670cca3 in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 7 (process 4221):
#0  0x00002b8486704d12 in poll () from /lib/libc.so.6
#1  0x0000000000454a3a in ast_io_wait (ioc=0x59a540, howlong=-4) at io.c:266
#2  0x00002aaaadc55165 in network_thread (ignore=0x599500) at pbx_dundi.c:2078
#3  0x000000000049b065 in dummy_start (data=0x599500) at utils.c:538
#4  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#5  0x00002b848670cca3 in clone () from /lib/libc.so.6
#6  0x0000000000000000 in ?? ()

Thread 6 (process 4222):
#0  0x00002b84866e2015 in nanosleep () from /lib/libc.so.6
#1  0x00002b84866e1e80 in sleep () from /lib/libc.so.6
#2  0x00002aaaadc5e23e in process_precache (ign=0x405d5ec0) at pbx_dundi.c:2118
#3  0x000000000049b065 in dummy_start (data=0x405d5ec0) at utils.c:538
#4  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#5  0x00002b848670cca3 in clone () from /lib/libc.so.6
#6  0x0000000000000000 in ?? ()

Thread 5 (process 4223):
#0  0x00002b84866e2015 in nanosleep () from /lib/libc.so.6
#1  0x00002b84866e1e80 in sleep () from /lib/libc.so.6
#2  0x00002aaaadf71db1 in scan_thread (unused=0x40616d60) at pbx_spool.c:436
#3  0x000000000049b065 in dummy_start (data=0x40616d60) at utils.c:538
#4  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#5  0x00002b848670cca3 in clone () from /lib/libc.so.6
#6  0x0000000000000000 in ?? ()

Thread 4 (process 4224):
#0  0x00002b84866e2015 in nanosleep () from /lib/libc.so.6
#1  0x00002b8486707068 in usleep () from /lib/libc.so.6
#2  0x00002aaab0f4e1e0 in rpt_master (config=0x5b48a0) at app_rpt.c:7262
#3  0x000000000049b065 in dummy_start (data=0x40658050) at utils.c:538
#4  0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#5  0x00002b848670cca3 in clone () from /lib/libc.so.6
#6  0x0000000000000000 in ?? ()

Thread 3 (process 4226):
#0  0x00002b8486704d12 in poll () from /lib/libc.so.6
#1  0x0000000000438d98 in ast_waitfor_nandfds (c=0x40691230, n=2, fds=0x0, nfds=0, exception=0x0, outfd=0x0, ms=0x4069102c) at channel.c:1723
#2  0x0000000000439b07 in ast_waitfor_n (c=0x40690cf0, n=5, ms=0xffffffffffffffff) at channel.c:1785
#3  0x00002aaaaeaa09cb in dial_exec_full (chan=0x5da6f0, data=0x1, peerflags=0x406922d4) at app_dial.c:440
#4  0x00002aaaaeaa3d96 in dial_exec (chan=0x40690cf0, data=0x5) at app_dial.c:1644
#5  0x0000000000472911 in pbx_extension_helper (c=0x5da6f0, con=0x0, context=0x1 <Address 0x1 out of bounds>, exten=0x5da990 "0870380122", priority=1, label=0x0,
    callerid=0x5dafa0 "8700", action=5921936) at pbx.c:505
#6  0x000000000047397e in __ast_pbx_run (c=0x5da6f0) at pbx.c:2161
#7  0x00000000004747cc in ast_pbx_run (c=0x5da6f0) at pbx.c:2511
#8  0x00002aaaad67c083 in ss_thread (data=0x40690cf0) at chan_zap.c:5781
#9  0x000000000049b065 in dummy_start (data=0x40690cf0) at utils.c:538
#10 0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#11 0x00002b848670cca3 in clone () from /lib/libc.so.6
#12 0x0000000000000000 in ?? ()

Thread 2 (process 4230):
#0  0x00002b848670cc64 in clone () from /lib/libc.so.6
#1  0x00002b8485e82070 in __free_tcb () from /lib/libpthread.so.0
#2  0x000000004071b960 in ?? ()
#3  0x0000000000000000 in ?? ()

Thread 1 (process 4229):
#0  0x00002b84866c60a2 in rawmemchr () from /lib/libc.so.6
#1  0x00002b84866bae70 in _IO_list_resetlock () from /lib/libc.so.6
#2  0x00002b84866b0b05 in vsscanf () from /lib/libc.so.6
#3  0x00002b84866ac378 in sscanf () from /lib/libc.so.6
#4  0x00002aaaad307e25 in func_header_read (chan=0x5e5890, function=0x0, data=0x406d28cb "TO", buf=0x406d18b0 "", len=4096) at chan_sip.c:10912
#5  0x000000000046f030 in pbx_substitute_variables_helper_full (c=0x5e5890, headp=0x5e5c78, cp1=0x0, cp2=0x406d7b10 "", count=8191) at pbx.c:1535
#6  0x000000000047286b in pbx_extension_helper (c=0x5e5890, con=0x5a0090, context=0x5e5ae0 "free_telecom_incoming", exten=0x5e5b30 "s", priority=1, label=0x0,
    callerid=0x5daf10 "0870380122", action=5501088) at pbx.c:1615
#7  0x000000000047397e in __ast_pbx_run (c=0x5e5890) at pbx.c:2161
#8  0x0000000000475309 in pbx_thread (data=0x0) at pbx.c:2472
#9  0x000000000049b065 in dummy_start (data=0x0) at utils.c:538
#10 0x00002b8485e820fa in start_thread () from /lib/libpthread.so.0
#11 0x00002b848670cca3 in clone () from /lib/libc.so.6
#12 0x0000000000000000 in ?? ()