I've been trying to reproduce this segmentation fault, and found a new one that appears to be related to the lock debugging code. I noticed that our T1 was returning CHANUNAVAIL for outbound calls, so I typed "core show locks" at the console, and got this: rats*CLI> core show locks core show locks rats*CLI> ======================================================================= === Currently Held Locks ============================================== ======================================================================= === === (times locked) === === Thread ID: 3083926416 (listener started at [ 1064] asterisk.c ast_makesocket()) === ------------------------------------------------------------------- === === Thread ID: 3083680656 (accept_thread started at [ 3041] manager.c init_manager()) === ------------------------------------------------------------------- === === Thread ID: 3083434896 (do_devstate_changes started at [ 378] devicestate.c ast_device_state_engine_init()) === ---> Tried and failed to get Lock #0 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x8298878 (69) === ---> Tried and failed to get Lock #1 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x829bc78 (70) === ---> Tried and failed to get Lock #2 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x8299c50 (56) === ---> Tried and failed to get Lock #3 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x829a9e0 (187) === ---> Tried and failed to get Lock #4 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x8297d58 (1) === ---> Tried and failed to get Lock #5 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82a5438 (588) === ---> Tried and failed to get Lock #6 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82b73d0 (42) === ---> Tried and failed to get Lock #7 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x829c998 (151) === ---> Tried and failed to get Lock #8 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82a28f0 (33) === ---> Tried and failed to get Lock #9 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x829dfd8 (33) === ---> Tried and failed to get Lock #10 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82ade60 (94) === ---> Tried and failed to get Lock #11 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82b71b0 (1) === ---> Tried and failed to get Lock #12 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x829c158 (551) === ---> Tried and failed to get Lock #13 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x829ed08 (39) === ---> Tried and failed to get Lock #14 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x829d300 (95) === ---> Tried and failed to get Lock #15 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82b7660 (43) === ---> Tried and failed to get Lock #16 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82c3ef0 (533) === ---> Tried and failed to get Lock #17 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x829dba8 (3825) === ---> Tried and failed to get Lock #18 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82b7b18 (421) === ---> Tried and failed to get Lock #19 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82a0a50 (30) === ---> Tried and failed to get Lock #20 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82c0c00 (59) === ---> Tried and failed to get Lock #21 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82b58c8 (2) === ---> Tried and failed to get Lock #22 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82a7bf8 (9) === ---> Tried and failed to get Lock #23 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82b7428 (2142) === ---> Tried and failed to get Lock #24 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82bfcb0 (24) === ---> Tried and failed to get Lock #25 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82a08a0 (8) === ---> Tried and failed to get Lock #26 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82a8670 (1) === ---> Tried and failed to get Lock #27 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82a2348 (69) === ---> Tried and failed to get Lock #28 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x8298b50 (2) === ---> Tried and failed to get Lock #29 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82b3a48 (28) === ---> Tried and failed to get Lock #30 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82c1638 (30) === ------------------------------------------------------------------- === === Thread ID: 3082832784 (do_parking_thread started at [ 2435] res_features.c load_module()) === ------------------------------------------------------------------- === === Thread ID: 3081599888 (do_monitor started at [15651] chan_sip.c restart_monitor()) === ------------------------------------------------------------------- === === Thread ID: 3080756112 (device_state_thread started at [ 4816] app_queue.c load_module()) === ------------------------------------------------------------------- === === Thread ID: 3080362896 (scan_thread started at [ 499] pbx_spool.c load_module()) === ------------------------------------------------------------------- === === Thread ID: 3071036304 (do_monitor started at [ 3504] chan_mgcp.c restart_monitor()) === ------------------------------------------------------------------- === === Thread ID: 3069406096 (pri_dchannel started at [ 9486] chan_zap.c start_pri()) === ---> Tried and failed to get Lock #0 (chan_zap.c): MUTEX 824 zap_queue_frame &p->owner->lock 0x82b6f18 (3) === ---> Tried and failed to get Lock #1 (chan_zap.c): MUTEX 824 zap_queue_frame &p->owner->lock 0x82bff00 (4) === ---> Tried and failed to get Lock #2 (chan_zap.c): MUTEX 824 zap_queue_frame &p->owner->lock 0x82b0e00 (3) === ---> Tried and failed to get Lock #3 (chan_zap.c): MUTEX 824 zap_queue_frame &p->owner->lock 0x82f8408 (1247) === ---> Tried and failed to get Lock #4 (chan_zap.c): MUTEX 824 zap_queue_frame &p->owner->lock 0x82ddfe0 (3) === ---> Tried and failed to get Lock #5 (chan_zap.c): MUTEX 824 zap_queue_frame &p->owner->lock 0x832d808 (2) === ---> Tried and failed to get Lock #6 (chan_zap.c): MUTEX 824 zap_queue_frame &p->owner->lock 0x8355f50 (2) === ---> Tried and failed to get Lock #7 (chan_zap.c): MUTEX 824 zap_queue_frame &p->owner->lock 0x8324940 (3) === ---> Tried and failed to get Lock #8 (chan_zap.c): MUTEX 824 zap_queue_frame &p->owner->lock 0x833c958 (3) === ---> Tried and failed to get Lock #9 (chan_zap.c): MUTEX 824 zap_queue_frame &p->owner->lock 0x8347218 (3) === ---> Tried and failed to get Lock #10 (chan_zap.c): MUTEX 824 zap_queue_frame &p->owner->lock 0x83557d8 (2) === ---> Lock #11 (chan_zap.c): MUTEX 8475 pri_dchannel &pri->lock 0xb6fe7544 (1) === ------------------------------------------------------------------- === === Thread ID: 3069160336 (pri_dchannel started at [ 9486] chan_zap.c start_pri()) === ------------------------------------------------------------------- === === Thread ID: 3068914576 (do_monitor started at [ 6999] chan_zap.c restart_monitor()) === ------------------------------------------------------------------- === === Thread ID: 3068246928 (session_do started at [ 2393] manager.c accept_thread()) === ------------------------------------------------------------------- === === Thread ID: 3068001168 (session_do started at [ 2393] manager.c accept_thread()) === ------------------------------------------------------------------- === === Thread ID: 3067755408 (session_do started at [ 2393] manager.c accept_thread()) === ------------------------------------------------------------------- === === Thread ID: 3067509648 (session_do started at [ 2393] manager.c accept_thread()) === ------------------------------------------------------------------- === === Thread ID: 3065052048 (autoservice_run started at [ 194] autoservice.c ast_autoservice_start()) === ------------------------------------------------------------------- === === Thread ID: 3063823248 (netconsole started at [ 1006] asterisk.c listener()) === ------------------------------------------------------------------- === === Thread ID: 3063577488 (pbx_thread started at [ 2647] pbx.c ast_pbx_start()) === ---> Lock #0 (channel.c): MUTEX 1733 ast_hangup &chan->lock 0x8362450 (1) === ---> Tried and failed to get Lock #1 (chan_zap.c): MUTEX 722 pri_grab &pri->lock 0xb6fe7544 (26929013) === ------------------------------------------------------------------- === === Thread ID: 3064314768 (pbx_thread started at [ 2647] pbx.c ast_pbx_start()) === ---> Lock #0 (channel.c): MUTEX 3295 ast_call &chan->lock 0x8378288 (1) === ---> Tried and failed to get Lock #1 (chan_zap.c): MUTEX 722 pri_grab &pri->lock 0xb6fe7544 (34247774) === ------------------------------------------------------------------- === ======================================================================= rats*CLI> [And after a 30-second or so delay,] Disconnected from Asterisk server Fortunately, I had core dumps enabled, whipped out my trusty gdb, and got the following backtrace from the core file: (gdb) thread apply all bt Thread 20 (process 25787): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7ddb5e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x08078b3b in main (argc=Cannot access memory at address 0x1 ) at asterisk.c:2524 #3 0xb7d28050 in __libc_start_main () from /lib/tls/i686/cmov/libc.so.6 #4 0x0805a311 in ?? () Thread 19 (process 25796): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7ddb5e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x0806ed6f in listener (unused=0x0) at asterisk.c:980 #3 0x08154b40 in dummy_start (data=0x81d5ed0) at utils.c:852 #4 0xb7ede46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #5 0xb7de56de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 18 (process 25797): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7ddb5e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x080ee093 in accept_thread (ignore=0x0) at manager.c:2352 #3 0x08154b40 in dummy_start (data=0x81d6bb0) at utils.c:852 #4 0xb7ede46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #5 0xb7de56de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 17 (process 25798): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7ee2676 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0 #2 0x080bab77 in do_devstate_changes (data=0x0) at /usr/src/asterisk-1.4.17/include/asterisk/lock.h:556 #3 0x08154b40 in dummy_start (data=0x81d6690) at utils.c:852 #4 0xb7ede46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #5 0xb7de56de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 16 (process 25800): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7dde2a1 in select () from /lib/tls/i686/cmov/libc.so.6 #2 0xb7c09db4 in ?? () from /usr/lib/asterisk/modules/res_features.so #3 0x08154b40 in dummy_start (data=0x81e04b8) at utils.c:852 #4 0xb7ede46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #5 0xb7de56de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 15 (process 25801): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7ddb5e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x080ddad4 in ast_io_wait (ioc=0x81e66b0, howlong=1000) at io.c:266 #3 0xb7b48399 in do_monitor (data=0x0) at chan_sip.c:15592 #4 0x08154b40 in dummy_start (data=0x81eff28) at utils.c:852 #5 0xb7ede46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #6 0xb7de56de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 14 (process 25802): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7ee2676 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0 #2 0xb7a0f2ca in device_state_thread (data=0x0) at /usr/src/asterisk-1.4.17/include/asterisk/lock.h:556 #3 0x08154b40 in dummy_start (data=0x81f02a8) at utils.c:852 #4 0xb7ede46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #5 0xb7de56de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 13 (process 25803): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7da4e96 in nanosleep () from /lib/tls/i686/cmov/libc.so.6 #2 0xb7da4ca7 in sleep () from /lib/tls/i686/cmov/libc.so.6 #3 0xb79abdc7 in scan_thread (unused=0x0) at pbx_spool.c:437 #4 0x08154b40 in dummy_start (data=0x82170f8) at utils.c:852 #5 0xb7ede46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #6 0xb7de56de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 12 (process 25812): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7ddb5e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x080ddad4 in ast_io_wait (ioc=0x8249420, howlong=1000) at io.c:266 #3 0xb70d4a3a in do_monitor (data=0x0) at chan_mgcp.c:3475 #4 0x08154b40 in dummy_start (data=0x824a900) at utils.c:852 #5 0xb7ede46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #6 0xb7de56de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 11 (process 25813): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7ee4e1e in __lll_mutex_lock_wait () from /lib/tls/i686/cmov/libpthread.so.0 #2 0xb7ee0b68 in _L_mutex_lock_86 () from /lib/tls/i686/cmov/libpthread.so.0 #3 0xb7ee058d in pthread_mutex_lock () from /lib/tls/i686/cmov/libpthread.so.0 #4 0xb6f9c876 in __ast_pthread_mutex_lock (filename=0xb6fdc757 "chan_zap.c", lineno=9215, func=0xb6fe47f9 "pri_dchannel", mutex_name=0xb6fddf25 "&pri->pvts[chanpos]->lock", t=0x8252088) at /usr/src/asterisk-1.4.17/include/asterisk/lock.h:357 #5 0xb6fce6c0 in pri_dchannel (vpri=0xb6fe7540) at chan_zap.c:9215 #6 0x08154b40 in dummy_start (data=0x824de98) at utils.c:852 #7 0xb7ede46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #8 0xb7de56de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 10 (process 25814): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7ddb5e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0xb6fcd21d in pri_dchannel (vpri=0xb6fe8278) at chan_zap.c:8473 #3 0x08154b40 in dummy_start (data=0x8251788) at utils.c:852 #4 0xb7ede46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #5 0xb7de56de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 9 (process 25818): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7ddb5e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x080f7b34 in do_message (s=0x828f0a0) at manager.c:2208 #3 0x080f7d77 in session_do (data=0x828f0a0) at manager.c:2270 #4 0x08154b40 in dummy_start (data=0x828f040) at utils.c:852 #5 0xb7ede46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #6 0xb7de56de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 8 (process 25836): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7ddb5e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x080f7b34 in do_message (s=0x8294950) at manager.c:2208 #3 0x080f7d77 in session_do (data=0x8294950) at manager.c:2270 #4 0x08154b40 in dummy_start (data=0x82905b0) at utils.c:852 #5 0xb7ede46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #6 0xb7de56de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 7 (process 25837): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7ddb5e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x080f7b34 in do_message (s=0x8294ee0) at manager.c:2208 #3 0x080f7d77 in session_do (data=0x8294ee0) at manager.c:2270 #4 0x08154b40 in dummy_start (data=0x828ffd0) at utils.c:852 #5 0xb7ede46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #6 0xb7de56de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 6 (process 25838): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7ddb5e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x080f7b34 in do_message (s=0x8295cd0) at manager.c:2208 #3 0x080f7d77 in session_do (data=0x8295cd0) at manager.c:2270 #4 0x08154b40 in dummy_start (data=0x828ff60) at utils.c:852 #5 0xb7ede46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #6 0xb7de56de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 5 (process 25893): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7ddb5e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x0809c419 in ast_waitfor_nandfds (c=0xb6b0eef8, n=0, fds=0x0, nfds=0, exception=0x0, outfd=0x0, ms=0xb6b0f338) at channel.c:2007 #3 0x0809cd2f in ast_waitfor_n (c=0xb6b0eef8, n=0, ms=0xb6b0f338) at channel.c:2069 #4 0x0807b58f in autoservice_run (ign=0x0) at autoservice.c:104 #5 0x08154b40 in dummy_start (data=0x8298318) at utils.c:852 #6 0xb7ede46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #7 0xb7de56de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 4 (process 28071): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7ddb5e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x0806f2d5 in netconsole (vconsole=0x81c0260) at asterisk.c:929 #3 0x08154b40 in dummy_start (data=0x82b4428) at utils.c:852 #4 0xb7ede46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #5 0xb7de56de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 3 (process 1362): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7da4e96 in nanosleep () from /lib/tls/i686/cmov/libc.so.6 #2 0xb7ddeb3c in usleep () from /lib/tls/i686/cmov/libc.so.6 #3 0xb6fcbe67 in zt_hangup (ast=0x83623d8) at chan_zap.c:726 #4 0x0809d79d in ast_hangup (chan=0x83623d8) at channel.c:1791 #5 0xb707243f in dial_exec_full (chan=0x8355280, data=, peerflags=0xb69a2e44, continue_exec=0x0) at app_dial.c:1721 #6 0xb7076b02 in dial_exec (chan=0x8355280, data=0xb69a50c8) at app_dial.c:1755 #7 0x0810d035 in pbx_extension_helper (c=0x8355280, con=, context=0x83554c0 "internal", exten=0x8355510 "97577312", priority=2, label=0x0, callerid=0x82a1e98 "3063596893", action=E_SPAWN) at pbx.c:532 #8 0x081102fd in __ast_pbx_run (c=0x8355280) at pbx.c:2306 #9 0x081116d5 in pbx_thread (data=0x8355280) at pbx.c:2623 #10 0x08154b40 in dummy_start (data=0x82ab7d0) at utils.c:852 #11 0xb7ede46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #12 0xb7de56de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 2 (process 1450): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7da4e96 in nanosleep () from /lib/tls/i686/cmov/libc.so.6 #2 0xb7ddeb3c in usleep () from /lib/tls/i686/cmov/libc.so.6 #3 0xb6fb1d43 in zt_call (ast=0x8378210, rdest=0xb6a56c3c "g0/19787642683", timeout=0) at chan_zap.c:726 #4 0x08092d15 in ast_call (chan=0x8378210, addr=0xb6a56c3c "g0/19787642683", timeout=0) at channel.c:3298 #5 0xb7070a02 in dial_exec_full (chan=0x833c8e0, data=, peerflags=0xb6a56e44, continue_exec=0x0) at app_dial.c:1257 #6 0xb7076b02 in dial_exec (chan=0x833c8e0, data=0xb6a590c8) at app_dial.c:1755 #7 0x0810d035 in pbx_extension_helper (c=0x833c8e0, con=, context=0x833cb20 "marketel-local-out", exten=0x833cb70 "919787642683", priority=2, label=0x0, callerid=0x82e0720 "3063596893", action=E_SPAWN) at pbx.c:532 #8 0x081102fd in __ast_pbx_run (c=0x833c8e0) at pbx.c:2306 #9 0x081116d5 in pbx_thread (data=0x833c8e0) at pbx.c:2623 #10 0x08154b40 in dummy_start (data=0x82a9c08) at utils.c:852 #11 0xb7ede46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #12 0xb7de56de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 1 (process 25816): #0 0xb6fafa32 in do_monitor (data=0x0) at chan_zap.c:6868 #1 0x08154b40 in dummy_start (data=0x8251798) at utils.c:852 #2 0xb7ede46b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #3 0xb7de56de in clone () from /lib/tls/i686/cmov/libc.so.6 (gdb) The segmentation fault happened in Thread 1, just above (do_monitor, chan_zap.c:6868), which is this code: i = iflist; while (i) { if (thispass != lastpass) { if (!found && ((i == last) || ((i == iflist) && !last))) { last = i; if (last) { if (!last->cidspill && !last->owner && !ast_strlen_zero(last->mailbox) && (thispass - last->onhooktime > 3) && (last->sig & __ZT_SIG_FXO)) { (gdb) p last $1 = (struct zt_pvt *) 0x20646e61 (gdb) p last->cidspill Cannot access memory at address 0x20647ce1 (gdb) p last $2 = (struct zt_pvt *) 0x20646e61 (gdb) p iflist $3 = (struct zt_pvt *) 0x82852f8 (gdb) p *iflist $4 = {lock = {mutex = {__data = {__lock = 0, __count = 0, __owner = 0, __kind = 1, __nusers = 0, {__spins = 0, __list = {__next = 0x0}}}, __size = '\0' , "\001\000\000\000\000\000\000\000\000\000\000", __align = 0}, track = 1, file = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, lineno = {0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, reentrancy = 0, func = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, thread = {0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, reentr_mutex = {__data = {__lock = 0, __count = 0, __owner = 0, __kind = 1, __nusers = 0, {__spins = 0, __list = {__next = 0x0}}}, __size = '\0' , "\001\000\000\000\000\000\000\000\000\000\000", __align = 0}}, owner = 0x0, sub_unused = {zfd = 0, owner = 0x0, chan = 0, buffer = {0 }, f = {frametype = 0, subclass = 0, datalen = 0, samples = 0, mallocd = 0, mallocd_hdr_len = 0, offset = 0, src = 0x0, data = 0x0, delivery = {tv_sec = 0, tv_usec = 0}, frame_list = {next = 0x0}, has_timing_info = 0, ts = 0, len = 0, seqno = 0}, needringing = 0, needbusy = 0, needcongestion = 0, needcallerid = 0, needanswer = 0, needflash = 0, needhold = 0, needunhold = 0, linear = 0, inthreeway = 0, curconf = {chan = 0, confno = 0, confmode = 0}}, subs = {{zfd = -1, owner = 0x0, chan = 0, buffer = {0 }, f = {frametype = 0, subclass = 0, datalen = 0, samples = 0, mallocd = 0, mallocd_hdr_len = 0, offset = 0, src = 0x0, data = 0x0, delivery = {tv_sec = 0, tv_usec = 0}, frame_list = {next = 0x0}, has_timing_info = 0, ts = 0, len = 0, seqno = 0}, needringing = 0, needbusy = 0, needcongestion = 0, needcallerid = 0, needanswer = 0, needflash = 0, needhold = 0, needunhold = 0, linear = 0, inthreeway = 0, curconf = {chan = 0, confno = 0, confmode = 0}}, {zfd = -1, owner = 0x0, chan = 0, buffer = {0 }, f = {frametype = 0, subclass = 0, datalen = 0, samples = 0, mallocd = 0, mallocd_hdr_len = 0, offset = 0, src = 0x0, data = 0x0, delivery = {tv_sec = 0, tv_usec = 0}, frame_list = {next = 0x0}, has_timing_info = 0, ts = 0, len = 0, seqno = 0}, needringing = 0, needbusy = 0, needcongestion = 0, needcallerid = 0, needanswer = 0, needflash = 0, needhold = 0, needunhold = 0, linear = 0, inthreeway = 0, curconf = {chan = 0, confno = 0, confmode = 0}}, {zfd = -1, owner = 0x0, chan = 0, buffer = {0 }, f = {frametype = 0, subclass = 0, datalen = 0, samples = 0, mallocd = 0, mallocd_hdr_len = 0, offset = 0, src = 0x0, data = 0x0, delivery = {tv_sec = 0, tv_usec = 0}, frame_list = {next = 0x0}, has_timing_info = 0, ts = 0, len = 0, seqno = 0}, needringing = 0, needbusy = 0, needcongestion = 0, needcallerid = 0, needanswer = 0, needflash = 0, needhold = 0, needunhold = 0, linear = 0, inthreeway = 0, curconf = {chan = 0, confno = 0, confmode = 0}}}, saveconf = {chan = 0, confno = 0, confmode = 0}, slaves = {0x0, 0x0, 0x0, 0x0}, master = 0x0, inconference = 0, sig = 0, radio = 0, outsigmod = -1, oprmode = 0, oprpeer = 0x0, rxgain = 0, txgain = 0, tonezone = -1, next = 0x8252088, prev = 0x0, adsi = 0, answeronpolarityswitch = 0, busydetect = 0, callreturn = 1, callwaiting = 0, callwaitingcallerid = 1, cancallforward = 1, canpark = 1, confirmanswer = 0, destroy = 0, didtdd = 0, dialednone = 0, dialing = 0, digital = 0, dnd = 0, echobreak = 0, echocanbridged = 1, echocanon = 0, faxhandled = 0, firstradio = 0, hanguponpolarityswitch = 0, hardwaredtmf = 0, hidecallerid = 0, hidecalleridname = 0, ignoredtmf = 0, immediate = 0, inalarm = 0, mate = 0, outgoing = 0, overlapdial = 0, permcallwaiting = 0, permhidecallerid = 0, priindication_oob = 0, priexclusive = 0, pulse = 0, pulsedial = 0, restrictcid = 0, threewaycalling = 1, transfer = 1, use_callerid = 1, use_callingpres = 1, usedistinctiveringdetection = 0, zaptrcallerid = 0, transfertobusy = 1, alerting = 0, alreadyhungup = 0, isidlecall = 0, proceeding = 0, progress = 0, resetting = 0, setup_ack = 0, use_smdi = 0, smdi_iface = 0x0, drings = {ringnum = {{ring = {0, 0, 0}}, {ring = {0, 0, 0}}, {ring = {0, 0, 0}}}, ringContext = {{contextData = '\0' }, {contextData = '\0' }, {contextData = '\0' }}}, context = "from-pstn", '\0' , defcontext = "from-pstn", '\0' , exten = '\0' , language = '\0' , mohinterpret = "default", '\0' , mohsuggest = '\0' , cid_ani = '\0' , cid_num = '\0' , cid_ton = 0, cid_name = '\0' , lastcid_num = '\0' , lastcid_name = '\0' , origcid_num = 0x0, origcid_name = 0x0, callwait_num = '\0' , callwait_name = '\0' , rdnis = '\0' , dnid = '\0' , group = 0, law = 0, confno = -1, confusers = 0, propconfno = -1, callgroup = 0, pickupgroup = 0, channel = -2, span = 0, guardtime = 0, cid_signalling = 1, cid_start = 1, callingpres = 0, callwaitingrepeat = 0, cidcwexpire = 0, cidspill = 0x0, cidpos = 0, cidlen = 0, ringt = 0, ringt_base = 400, stripmsd = 0, callwaitcas = 0, callwaitrings = 0, echocancel = 128, echotraining = 0, echorest = '\0' , busycount = 3, busy_tonelength = 0, busy_quietlength = 0, callprogress = 0, flashtime = {tv_sec = 0, tv_usec = 0}, dsp = 0x0, cref = 0, dop = {op = 0, dialstr = '\0' }, whichwink = 0, finaldial = '\0' , accountcode = '\0' , amaflags = 0, tdd = 0x0, call_forward = '\0' , mailbox = '\0' , dialdest = '\0' , onhooktime = 1202827765, msgstate = -1, distinctivering = 0, cidrings = 0, dtmfrelax = 2048, fake_event = 0, polarityonanswerdelay = 600, polaritydelaytv = {tv_sec = 0, tv_usec = 0}, sendcalleridafter = 1, pri = 0x0, bearer = 0x0, realcall = 0x0, call = 0x0, prioffset = 0, logicalspan = 0, polarity = 0, dsp_features = 0, begindigit = 0 '\0'} (gdb) p *iflist->next $5 = {lock = {mutex = {__data = {__lock = -1209691000, __count = 137214368, __owner = 137214368, __kind = 137214368, __nusers = 1027423549, {__spins = 1027423549, __list = {__next = 0x3d3d3d3d}}}, __size = "\210\224å· ¹-\b ¹-\b ¹-\b========", __align = -1209691000}, track = 1, file = {0x3d3d3d3d
, 0x3d3d3d3d
, 0x3d3d3d3d
, 0x3d3d3d3d
, 0x3d3d3d3d
, 0x3d3d3d3d
, 0x3d3d3d3d
, 0x3d3d3d3d
, 0x3d3d3d3d
, 0x3d3d3d3d
}, lineno = {1027423549, 1027423549, 1027423498, 1920287520, 1953391986, 1210087788, 543452261, 1801678668, 1027416179, 1027423549}, reentrancy = 1027423549, func = {0x3d3d3d3d
, 0x3d3d3d3d
, 0x3d3d3d3d
, 0x3d3d3d3d
, 0x3d3d3d3d
, 0x3d3d3d3d
, 0x3d3d3d3d
, 0x3d3d3d3d
, 0x3d3d3d3d
, 0x3d3d3d0a
}, thread = {1027423549, 1027423549, 1027423549, 1027423549, 1027423549, 1027423549, 1027423549, 1027423549, 1027423549, 1027423549}, reentr_mutex = {__data = {__lock = 1027423549, __count = 1027423549, __owner = 1027423549, __kind = 1027423549, __nusers = 1027423549, {__spins = 1027423549, __list = {__next = 0x3d3d3d3d}}}, __size = '=' , __align = 1027423549}}, owner = 0x3d3d3d3d, sub_unused = {zfd = 1027423498, owner = 0x3d3d3d0a, chan = 1768307744, buffer = {25964, 8254, 27708, 28265, 8293, 30062, 15981, 15392, 30054, 25454, 26996, 28271, 8254, 27708, 25455, 8299, 24942, 25965, 8254, 27708, 25455, 8299, 25697, 29284, 8254, 29736, 28009, 29541, 27680, 25455, 25963, 10596, 15626, 15677, 15626, 15677, 21536, 29288, 24933, 8292, 17481, 8250, 12339, 13112, 12857, 13366, 13873, 10272, 26988, 29811, 28261, 29285, 8224, 8224, 8224, 8224, 8224, 8224, 29472, 24948, 29810, 25701, 24864, 8308, 8283, 12337, 13366, 8285, 29537, 25972, 26994, 27507, 25390, 24864, 29811, 27999, 27489, 29541, 25455, 25963, 10356, 10537, 15626, 15677, 11552, 11565 , 15626, 15677, 15626, 15677, 21536, 29288, 24933, 8292, 17481, 8250, 12339, 13112, 14390, 13872, 13877, 10272, 25441, 25955, 29808, 29791, 29288, 24933, 8292, 8224, 8224, 8224, 29472, 24948, 29810, 25701, 24864, 8308, 8283, 12339, 12596, 8285, 24941, 24942, 25959, 11890, 8291, 28265, 29801, 27999, 28257, 26465, 29285, 10536, 2601, 15677, 8253, 11565 }, f = {frametype = 757935405, subclass = 757935405, datalen = 757935405, samples = 757935405, mallocd = 757935405, mallocd_hdr_len = 1027410477, offset = 1027410493, src = 0x6854203d
, data = 0x64616572, delivery = {tv_sec = 977553696, tv_usec = 942682912}, frame_list = {next = 0x34333433}, has_timing_info = 540424504, ts = 1601135656, len = 1937139044, seqno = 1702125940}, needringing = 1, needbusy = 1, needcongestion = 1, needcallerid = 1, needanswer = 1, needflash = 0, needhold = 1, needunhold = 0, linear = 1, inthreeway = 1, curconf = {chan = 1936025454, confno = 1953701920, confmode = 1702130273}}, subs = {{zfd = 1952522340, owner = 0x20205b20, chan = 1563965235, buffer = {25632, 30309, 25449, 29541, 24948, 25972, 25390, 24864, 29811, 25695, 30309, 25449, 24421, 29811, 29793, 24421, 28261, 26983, 25966, 26975, 26990, 10356, 10537, 15626, 15677, 11552, 11565, 8254, 29268, 25961, 8292, 28257, 8292, 24934, 27753, 25701, 29728, 8303, 25959, 8308, 28492, 27491, 8992, 8240, 25384, 24936, 28270, 27749, 25390, 14889, 19744, 21589, 22597, 12576, 14384, 8243, 26723, 28257, 25966, 24428, 26982, 25710, 27743, 25455, 25963, 8292, 25382, 15917, 28524, 27491, 12320, 14456, 14642, 14392, 14391, 10272, 14646, 2601, 15677, 8253, 11565, 15917, 21536, 26994, 25701, 24864, 25710, 26144, 26977, 25964, 8292, 28532, 26400, 29797, 19488, 25455, 8299, 12579, 10272, 26723, 28257, 25966, 11884, 10595, 8250, 21837, 17748, 8280, 12337, 13112, 25376, 24936, 28270, 27749, 26207, 28265, 24420, 28524, 27491, 25701, 9760, 11619, 27710, 25455, 8299, 30768, 12856, 25145, 14179, 8248, 14120, 10544, 15626, 15677, 11552, 11565, 8254, 29268, 25961, 8292, 28257, 8292, 24934, 27753, 25701, 29728, 8303, 25959, 8308, 28492, 27491, 8992, 8242, 25384, 24936, 28270, 27749, 25390, 14889, 19744, 21589, 22597, 12576, 14384, 8243, 26723, 28257, 25966, 24428, 26982, 25710, 27743, 25455, 25963, 8292, 25382, 15917, 28524, 27491, 12320, 14456, 14642, 25401, 12341, 10272, 13877, 2601, 15677, 8253, 11565, 15917, 21536}, f = {frametype = 1684367730, subclass = 1684955424, datalen = 1767990816, samples = 543450476, mallocd = 1730178932, mallocd_hdr_len = 1277195365, offset = 543908719, src = 0x28203323
, data = 0x6e616863, delivery = {tv_sec = 778855790, tv_usec = 540682595}, frame_list = {next = 0x4554554d}, has_timing_info = 808525912, ts = 1663054648, len = 1852727656, seqno = 1717529701}, needringing = 1, needbusy = 0, needcongestion = 0, needcallerid = 1, needanswer = 0, needflash = 1, needhold = 1, needunhold = 0, linear = 0, inthreeway = 1, curconf = {chan = 1801678700, confno = 639657061, confmode = 1816014179}}, {zfd = 543908719, owner = 0x32387830, chan = 1698259257, buffer = {8240, 12584, 14136, 2601, 15677, 8253, 11565, 15917, 21536, 26994, 25701, 24864, 25710, 26144, 26977, 25964, 8292, 28532, 26400, 29797, 19488, 25455, 8299, 13347, 10272, 26723, 28257, 25966, 11884, 10595, 8250, 21837, 17748, 8280, 12337, 13112, 25376, 24936, 28270, 27749, 26207, 28265, 24420, 28524, 27491, 25701, 9760, 11619, 27710, 25455, 8299, 30768, 12856, 14137, 13668, 8248, 12584, 2601, 15677, 8253, 11565, 15917, 21536, 26994, 25701, 24864, 25710, 26144, 26977, 25964, 8292, 28532, 26400, 29797, 19488, 25455, 8299, 13603, 10272, 26723, 28257, 25966, 11884, 10595, 8250, 21837, 17748, 8280, 12337, 13112, 25376, 24936, 28270, 27749, 26207, 28265, 24420, 28524, 27491, 25701, 9760, 11619, 27710, 25455, 8299, 30768, 12856, 13665, 13108, 8248, 13608, 14392, 2601, 15677, 8253, 11565, 15917, 21536, 26994, 25701, 24864, 25710, 26144, 26977, 25964, 8292, 28532, 26400, 29797, 19488, 25455, 8299, 13859, 10272, 26723, 28257, 25966, 11884, 10595, 8250, 21837, 17748, 8280, 12337, 13112, 25376, 24936, 28270, 27749, 26207, 28265, 24420, 28524, 27491, 25701, 9760, 11619, 27710, 25455, 8299, 30768, 12856, 14178, 25651, 8240, 13352, 10546, 15626, 15677, 11552, 11565, 8254, 29268, 25961, 8292, 28257, 8292, 24934, 27753, 25701, 29728, 8303, 25959, 8308, 28492, 27491, 8992, 8247, 25384, 24936, 28270, 27749}, f = {frametype = 975790894, subclass = 1414876448, datalen = 824203333, samples = 540227632, mallocd = 1851877475, mallocd_hdr_len = 1600939374, offset = 1684957542, src = 0x636f6c5f
, data = 0x2064656b, delivery = {tv_sec = 1043161894, tv_usec = 1801678700}, frame_list = {next = 0x38783020}, has_timing_info = 962804018, ts = 673200185, len = 691090737, seqno = 1027423498}, needringing = 0, needbusy = 0, needcongestion = 0, needcallerid = 0, needanswer = 0, needflash = 1, needhold = 0, needunhold = 0, linear = 1, inthreeway = 0, curconf = {chan = 1918115902, confno = 543450473, confmode = 543452769}}, {zfd = 1818845542, owner = 0x74206465, chan = 1701257327, buffer = {8308, 28492, 27491, 8992, 8248, 25384, 24936, 28270, 27749, 25390, 14889, 19744, 21589, 22597, 12576, 14384, 8243, 26723, 28257, 25966, 24428, 26982, 25710, 27743, 25455, 25963, 8292, 25382, 15917, 28524, 27491, 12320, 14456, 24882, 14386, 12390, 10272, 13107, 2601, 15677, 8253, 11565, 15917, 21536, 26994, 25701, 24864, 25710, 26144, 26977, 25964, 8292, 28532, 26400, 29797, 19488, 25455, 8299, 14627, 10272, 26723, 28257, 25966, 11884, 10595, 8250, 21837, 17748, 8280, 12337, 13112, 25376, 24936, 28270, 27749, 26207, 28265, 24420, 28524, 27491, 25701, 9760, 11619, 27710, 25455, 8299, 30768, 12856, 25657, 25702, 8248, 13096, 10547, 15626, 15677, 11552, 11565, 8254, 29268, 25961, 8292, 28257, 8292, 24934, 27753, 25701, 29728, 8303, 25959, 8308, 28492, 27491, 8992, 12337, 10272, 26723, 28257, 25966, 11884, 10595, 8250, 21837, 17748, 8280, 12337, 13112, 25376, 24936, 28270, 27749, 26207, 28265, 24420, 28524, 27491, 25701, 9760, 11619, 27710, 25455, 8299, 30768, 12856, 25697, 13925, 8240, 14632, 10548, 15626, 15677, 11552, 11565, 8254, 29268, 25961, 8292, 28257, 8292, 24934, 27753, 25701, 29728, 8303, 25959, 8308, 28492, 27491, 8992, 12593, 10272, 26723, 28257, 25966, 11884, 10595, 8250, 21837, 17748, 8280, 12337, 13112, 25376, 24936, 28270, 27749, 26207, 28265, 24420, 28524, 27491, 25701, 9760}, f = {frametype = 1816014179, subclass = 543908719, datalen = 842561584, samples = 1647392610, mallocd = 824713264, mallocd_hdr_len = 1027410473, offset = 757932093, src = 0x54203e2d
, data = 0x64656972, delivery = {tv_sec = 1684955424, tv_usec = 1767990816}, frame_list = {next = 0x2064656c}, has_timing_info = 1730178932, ts = 1277195365, len = 543908719, seqno = 540160291}, needringing = 0, needbusy = 0, needcongestion = 0, needcallerid = 1, needanswer = 0, needflash = 1, needhold = 0, needunhold = 0, linear = 1, inthreeway = 1, curconf = {chan = 1818586734, confno = 975790894, confmode = 1414876448}}}, saveconf = {chan = 824203333, confno = 540227632, confmode = 1851877475}, slaves = {0x5f6c656e, 0x646e6966, 0x636f6c5f, 0x2064656b}, master = 0x3e2d6326, inconference = 1801678700, sig = 947400736, radio = 828586290, outsigmod = 673200181, oprmode = 691090741, oprpeer = 0x3d3d3d0a, rxgain = 9.84393123e-12, txgain = 4.20158723e+30, tonezone = 543450473, next = 0x20646e61, prev = 0x6c696166, adsi = 1, answeronpolarityswitch = 0, busydetect = 1, callreturn = 0, callwaiting = 0, callwaitingcallerid = 1, cancallforward = 1, canpark = 0, confirmanswer = 0, destroy = 0, didtdd = 1, dialednone = 0, dialing = 0, digital = 1, dnd = 1, echobreak = 0, echocanbridged = 0, echocanon = 0, faxhandled = 0, firstradio = 0, hanguponpolarityswitch = 0, hardwaredtmf = 1, hidecallerid = 0, hidecalleridname = 0, ignoredtmf = 0, immediate = 0, inalarm = 1, mate = 0, outgoing = 1, overlapdial = 1, permcallwaiting = 1, permhidecallerid = 0, priindication_oob = 1, priexclusive = 1, pulse = 1, pulsedial = 1, restrictcid = 0, threewaycalling = 1, transfer = 1, use_callerid = 0, use_callingpres = 0, usedistinctiveringdetection = 0, zaptrcallerid = 0, transfertobusy = 0, alerting = 0, alreadyhungup = 1, isidlecall = 0, proceeding = 0, progress = 1, resetting = 1, setup_ack = 1, use_smdi = 0, smdi_iface = 0x6f4c2074, drings = {ringnum = {{ring = {589327203, 673198897, 1851877475}}, {ring = {778855790, 540682595, 1163154765}}, {ring = {808525912, 1663054648, 1852727656}}}, ringContext = {{contextData = "el_find_locked &c->lock 0x829ed08 (39)\n=== ---> Tried and failed to get Lock #14"}, {contextData = " (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x829d300 (95)\n=== ---> Tr"}, {contextData = "ied and failed to get Lock #15 (channel.c): MUTEX 1083 channel_find_locked &c->l"}}}, context = "ock 0x82b7660 (43)\n=== ---> Tried and failed to get Lock #16 (channel.c): MUTEX ", defcontext = "1083 channel_find_locked &c->lock 0x82c3ef0 (533)\n=== ---> Tried and failed to g", exten = "et Lock #17 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x829dba8 (3825", language = ")\n=== ---> Tried and", mohinterpret = " failed to get Lock #18 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x8", mohsuggest = "2b7b18 (421)\n=== ---> Tried and failed to get Lock #19 (channel.c): MUTEX 1083 c", cid_ani = "hannel_find_locked &c->lock 0x82a0a50 (30)\n=== ---> Tried and failed to get Lock", cid_num = " #20 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82c0c00 (59)\n=== ---", cid_ton = 1918115902, cid_name = "ied and failed to get Lock #21 (channel.c): MUTEX 1083 channel_find_locked &c->l", lastcid_num = "ock 0x82b58c8 (2)\n=== ---> Tried and failed to get Lock #22 (channel.c): MUTEX 1", lastcid_name = "083 channel_find_locked &c->lock 0x82a7bf8 (9)\n=== ---> Tried and failed to get ", origcid_num = 0x6b636f4c
, origcid_name = 0x33322320
, callwait_num = " (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x82b7428 (2142)\n=== ---> ", callwait_name = "Tried and failed to get Lock #24 (channel.c): MUTEX 1083 channel_find_locked &c-", rdnis = ">lock 0x82bfcb0 (24)\n=== ---> Tried and failed to get Lock #25 (channel.c): MUTE", dnid = "X 1083 channel_find_locked &c->lock 0x82a08a0 (8)\n=== ---> Tried and failed to g", group = 2336070161391449189, law = 540422691, confno = 1634231080, confusers = 1818586734, propconfno = 975790894, callgroup = 3539926361904074016, pickupgroup = 7953753191864285232, channel = 1600939374, span = 1684957542, guardtime = 1668246623, cid_signalling = 543450475, cid_start = 1043161894, callingpres = 1801678700, callwaitingrepeat = 947400736, cidcwexpire = 909664562, cidspill = 0x28203037
, cidpos = 1024076081, cidlen = 757087549, ringt = 540945709, ringt_base = 1701409364, stripmsd = 1851859044, callwaitcas = 1634082916, callwaitrings = 1684368489, echocancel = 544175136, echotraining = 544499047, echorest = "Lock #27 (channel.c)", busycount = 1431117882, busy_tonelength = 542655828, busy_quietlength = 859320369, callprogress = 1634231072, flashtime = {tv_sec = 1818586734, tv_usec = 1852401247}, dsp = 0x6f6c5f64, cref = 1684368227, dop = {op = 761472544, dialstr = ">lock 0x82a2348 (69)\n=== ---> Tried and failed to get Lock #28 (channel.c): MUTEX 1083 channel_find_locked &c->lock 0x8298b50 (2)\n=== ---> Tried and failed to get Lock #29 (channel.c): MUTEX 1083 chan"...}, whichwink = 1713398894, finaldial = "ailed to get Lock #30 (channel.c): MUTEX 1083 channel_find_locke", accountcode = "d &c->lock 0x82c1638", amaflags = 808658976, tdd = 0x3d3d0a29, call_forward = "= ", '-' , "\n===\n=== Th", mailbox = "read ID: 3082832784 (do_parking_thread started at [ 2435] res_features.c load", dialdest = "_module())\n=== ", '-' , "\n===\n=== Thread ID: 3081599888 (do_monitor", ' ' , "started at [15651] chan_sip.c restart_monitor())\n=== ", '-' , "\n", onhooktime = 171785533, msgstate = -256, distinctivering = 0, cidrings = 65, dtmfrelax = 137414920, fake_event = -1209691736, polarityonanswerdelay = 600, polaritydelaytv = {tv_sec = 0, tv_usec = 0}, sendcalleridafter = 1, pri = 0xb6fe7540, bearer = 0x0, realcall = 0x0, call = 0x8307fa0, prioffset = 1, logicalspan = 0, polarity = 0, dsp_features = 0, begindigit = 48 '0'} (gdb) p (char *)iflist $6 = 0x82852f8 "" (gdb) p (char *)iflist->next $7 = 0x8252088 "\210\224\XXX\271-\b\240\271-\b\240\271-\b", '=' , "\n=== Currently Held Locks ", '=' , "\n", '=' ... (gdb) How very interesting! The second interface in the list has been clobbered by the output of "core show locks"! Shortly after restarting, I got another segfault, which may or may not be related: Program terminated with signal 11, Segmentation fault. #0 pri_dchannel (vpri=0xb70bc540) at chan_zap.c:9220 (gdb) thread apply all bt Thread 20 (process 1709): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7eb05e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x08078b3b in main (argc=Cannot access memory at address 0x1 ) at asterisk.c:2524 #3 0xb7dfd050 in __libc_start_main () from /lib/tls/i686/cmov/libc.so.6 #4 0x0805a311 in ?? () Thread 19 (process 1713): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7eb05e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x0806ed6f in listener (unused=0x0) at asterisk.c:980 #3 0x08154b40 in dummy_start (data=0x81d5ed0) at utils.c:852 #4 0xb7fb346b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #5 0xb7eba6de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 18 (process 1714): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7eb05e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x080ee093 in accept_thread (ignore=0x0) at manager.c:2352 #3 0x08154b40 in dummy_start (data=0x81d6bb0) at utils.c:852 #4 0xb7fb346b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #5 0xb7eba6de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 17 (process 1715): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7fb7676 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0 #2 0x080bab77 in do_devstate_changes (data=0x0) at /usr/src/asterisk-1.4.17/include/asterisk/lock.h:556 #3 0x08154b40 in dummy_start (data=0x81d6690) at utils.c:852 #4 0xb7fb346b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #5 0xb7eba6de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 16 (process 1716): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7eb32a1 in select () from /lib/tls/i686/cmov/libc.so.6 #2 0xb7cdedb4 in ?? () from /usr/lib/asterisk/modules/res_features.so #3 0x08154b40 in dummy_start (data=0x81e0ae8) at utils.c:852 #4 0xb7fb346b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #5 0xb7eba6de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 15 (process 1717): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7eb05e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x080ddad4 in ast_io_wait (ioc=0x81e66d8, howlong=689) at io.c:266 #3 0xb7c1d399 in do_monitor (data=0x0) at chan_sip.c:15592 #4 0x08154b40 in dummy_start (data=0x81eff60) at utils.c:852 #5 0xb7fb346b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #6 0xb7eba6de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 14 (process 1718): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7fb7676 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0 #2 0xb7ae42ca in device_state_thread (data=0x0) at /usr/src/asterisk-1.4.17/include/asterisk/lock.h:556 #3 0x08154b40 in dummy_start (data=0x81f06d8) at utils.c:852 #4 0xb7fb346b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #5 0xb7eba6de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 13 (process 1719): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7e79e96 in nanosleep () from /lib/tls/i686/cmov/libc.so.6 #2 0xb7e79ca7 in sleep () from /lib/tls/i686/cmov/libc.so.6 #3 0xb7a80dc7 in scan_thread (unused=0x0) at pbx_spool.c:437 #4 0x08154b40 in dummy_start (data=0x82178b0) at utils.c:852 #5 0xb7fb346b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #6 0xb7eba6de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 12 (process 1720): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7eb05e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x080ddad4 in ast_io_wait (ioc=0x82499d8, howlong=1000) at io.c:266 #3 0xb71a9a3a in do_monitor (data=0x0) at chan_mgcp.c:3475 #4 0x08154b40 in dummy_start (data=0x824ae98) at utils.c:852 #5 0xb7fb346b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #6 0xb7eba6de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 11 (process 1722): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7eb05e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0xb70a221d in pri_dchannel (vpri=0xb70bd278) at chan_zap.c:8473 #3 0x08154b40 in dummy_start (data=0x8253ac8) at utils.c:852 #4 0xb7fb346b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #5 0xb7eba6de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 10 (process 1723): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7eb05e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0xb7084618 in do_monitor (data=0x0) at chan_zap.c:6847 #3 0x08154b40 in dummy_start (data=0x8253ad8) at utils.c:852 #4 0xb7fb346b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #5 0xb7eba6de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 9 (process 1724): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7eb05e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x080f7b34 in do_message (s=0x82923a8) at manager.c:2208 #3 0x080f7d77 in session_do (data=0x82923a8) at manager.c:2270 #4 0x08154b40 in dummy_start (data=0x8247b00) at utils.c:852 #5 0xb7fb346b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #6 0xb7eba6de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 8 (process 1725): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7eb05e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x080f7b34 in do_message (s=0x8292d68) at manager.c:2208 #3 0x080f7d77 in session_do (data=0x8292d68) at manager.c:2270 #4 0x08154b40 in dummy_start (data=0x8247900) at utils.c:852 #5 0xb7fb346b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #6 0xb7eba6de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 7 (process 1726): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7eb05e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x080f7b34 in do_message (s=0x825bf08) at manager.c:2208 #3 0x080f7d77 in session_do (data=0x825bf08) at manager.c:2270 #4 0x08154b40 in dummy_start (data=0x8252d38) at utils.c:852 #5 0xb7fb346b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #6 0xb7eba6de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 6 (process 1727): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7eb05e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x080f7b34 in do_message (s=0x825ccf8) at manager.c:2208 #3 0x080f7d77 in session_do (data=0x825ccf8) at manager.c:2270 #4 0x08154b40 in dummy_start (data=0x8291598) at utils.c:852 #5 0xb7fb346b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #6 0xb7eba6de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 5 (process 1732): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7eb05e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x0806f2d5 in netconsole (vconsole=0x81c0260) at asterisk.c:929 #3 0x08154b40 in dummy_start (data=0x8295888) at utils.c:852 #4 0xb7fb346b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #5 0xb7eba6de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 4 (process 1734): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7eb05e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x0809c419 in ast_waitfor_nandfds (c=0xb6dbfbf0, n=1, fds=0xb6dbfbfc, nfds=0, exception=0x0, outfd=0xb6dbfbd8, ms=0xb6dbfbf4) at channel.c:2007 #3 0x0809c8a9 in ast_waitfordigit_full (c=0x829fb30, ms=86301714, audiofd=-1, cmdfd=-1) at channel.c:2122 #4 0x0809cbc4 in ast_readstring_full (c=0x829fb30, s=0xb6dbfd38 "", len=1, timeout=86400000, ftimeout=86400000, enders=0x819729e "#", audiofd=-1, ctrlfd=-1) at channel.c:3354 #5 0x0809cc44 in ast_readstring (c=0x829fb30, s=0xb6dbfd38 "", len=1, timeout=86400000, ftimeout=86400000, enders=0x819729e "#") at channel.c:3332 #6 0x0806073d in ast_app_getdata (c=0x829fb30, prompt=0xb6dbfca4 "marketel/logged-on-enter-result", s=0xb6dbfd38 "", maxlen=1, timeout=86400000) at app.c:125 #7 0xb724550c in read_exec (chan=0x829fb30, data=0xb6dc20c8) at app_read.c:208 #8 0x0810d035 in pbx_extension_helper (c=0x829fb30, con=, context=0x829fd70 "marketel-stations", exten=0x829fdc0 "700", priority=504, label=0x0, callerid=0x8252d48 "700~:30", action=E_SPAWN) at pbx.c:532 #9 0x081102fd in __ast_pbx_run (c=0x829fb30) at pbx.c:2306 #10 0x081116d5 in pbx_thread (data=0x829fb30) at pbx.c:2623 #11 0x08154b40 in dummy_start (data=0x82a1d68) at utils.c:852 #12 0xb7fb346b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #13 0xb7eba6de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 3 (process 1765): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7eb05e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x0809c419 in ast_waitfor_nandfds (c=0xb6c45ef8, n=0, fds=0x0, nfds=0, exception=0x0, outfd=0x0, ms=0xb6c46338) at channel.c:2007 #3 0x0809cd2f in ast_waitfor_n (c=0xb6c45ef8, n=0, ms=0xb6c46338) at channel.c:2069 #4 0x0807b58f in autoservice_run (ign=0x0) at autoservice.c:104 #5 0x08154b40 in dummy_start (data=0x82b9b80) at utils.c:852 #6 0xb7fb346b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #7 0xb7eba6de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 2 (process 1937): #0 0xffffe410 in __kernel_vsyscall () #1 0xb7eb05e7 in poll () from /lib/tls/i686/cmov/libc.so.6 #2 0x0809c419 in ast_waitfor_nandfds (c=0xb6d83e14, n=1, fds=0x0, nfds=0, exception=0x0, outfd=0x0, ms=0xb6d83e18) at channel.c:2007 #3 0x0809ceb0 in ast_safe_sleep_conditional (chan=0x82aaf20, ms=86396573, cond=0, data=0x0) at channel.c:2076 #4 0x0809cf08 in ast_safe_sleep (chan=0x82aaf20, ms=86400000) at channel.c:1180 #5 0x0810d035 in pbx_extension_helper (c=0x82aaf20, con=, context=0x82ab160 "marketel-stations", exten=0x82ab1b0 "702", priority=306, label=0x0, callerid=0x82acee8 "702~:34", action=E_SPAWN) at pbx.c:532 #6 0x081102fd in __ast_pbx_run (c=0x82aaf20) at pbx.c:2306 #7 0x081116d5 in pbx_thread (data=0x82aaf20) at pbx.c:2623 #8 0x08154b40 in dummy_start (data=0x8299750) at utils.c:852 #9 0xb7fb346b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #10 0xb7eba6de in clone () from /lib/tls/i686/cmov/libc.so.6 Thread 1 (process 1721): #0 pri_dchannel (vpri=0xb70bc540) at chan_zap.c:9220 #1 0x08154b40 in dummy_start (data=0x824e430) at utils.c:852 #2 0xb7fb346b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #3 0xb7eba6de in clone () from /lib/tls/i686/cmov/libc.so.6 (gdb) (gdb) p ((struct zt_pri *)vpri)->pvts[chanpos] $14 = (struct zt_pvt *) 0x82543c8 (gdb) x/300s 0x82543c8 0x82543c8: "\210\344\362\267\210\344\362\267\267\300C%\b\300C%\b\260" 0x82543da: "" 0x82543db: "" 0x82543dc: "\377\377\377\177" 0x82543e1: "" 0x82543e2: "" 0x82543e3: "" 0x82543e4: "Z\004\265\002" 0x82543e9: "" 0x82543ea: "" 0x82543eb: "" 0x82543ec: "\327\267xl(" 0x82543f1: "" 0x82543f2: "" 0x82543f3: "" 0x82543f4: " " 0x82543f6: "\bmsg0001.gsm" 0x8254403: "" 0x8254404: "\327\301\003\265\002" 0x8254409: "" 0x825440a: "" 0x825440b: "" 0x825440c: "M\246;7" 0x8254411: "" 0x8254412: "" 0x8254413: "" 0x8254414: "\030" 0x8254416: "\004." 0x8254419: "g00\221\003\265\002" 0x8254421: "" 0x8254422: "" 0x8254423: "" 0x8254424: "\327\354\022\023>" 0x8254429: "" 0x825442a: "" 0x825442b: "" 0x825442c: "\030" 0x825442e: "\004.." 0x8254432: "" 0x8254433: "" 0x8254434: "^\004\265\002" 0x8254439: "" 0x825443a: "" 0x825443b: "" 0x825443c: "\nY/k" 0x8254441: "" 0x8254442: "" 0x8254443: "" 0x8254444: " " 0x8254446: "\bmsg0001.txt" 0x8254453: "" 0x8254454: "5\004\265\002" 0x8254459: "" 0x825445a: "" 0x825445b: "" 0x825445c: "x3^m" 0x8254461: "" 0x8254462: "" 0x8254463: "" 0x8254464: " " 0x8254466: "\bmsg0000.txt" 0x8254473: "" 0x8254474: "4\004\265\002" 0x8254479: "" 0x825447a: "" 0x825447b: "" 0x825447c: "\377\377\377\177" 0x8254481: "" 0x8254482: "" 0x8254483: "" 0x8254484: " " 0x8254486: "\bmsg0000.gsm" 0x8254493: "" 0x8254494: " " 0x8254496: "\bmsg0012.gsm" 0x82544a3: "" 0x82544a4: "\016\004\265\002" 0x82544a9: "" 0x82544aa: "" 0x82544ab: "" 0x82544ac: "\006\244\232\023" 0x82544b1: "" 0x82544b2: "" 0x82544b3: "" 0x82544b4: " " 0x82544b6: "\bmsg0010.gsm" 0x82544c3: "" 0x82544c4: "\002\004\265\002" 0x82544c9: "" 0x82544ca: "" 0x82544cb: "" 0x82544cc: "\253rY\025" 0x82544d1: "" 0x82544d2: "" 0x82544d3: "" 0x82544d4: " " 0x82544d6: "\bmsg0009.txt" 0x82544e3: "" 0x82544e4: "]\004\265\002" 0x82544e9: "" 0x82544ea: "" 0x82544eb: "" 0x82544ec: "\327\320,\021\030" 0x82544f1: "" 0x82544f2: "" 0x82544f3: "" 0x82544f4: " " 0x82544f6: "\bmsg0021.gsm" 0x8254503: "" 0x8254504: "\"\004\265\002" 0x8254509: "" 0x825450a: "" 0x825450b: "" 0x825450c: ">\a9\030" 0x8254511: "" 0x8254512: "" 0x8254513: "" 0x8254514: " " 0x8254516: "\bmsg0006.txt" 0x8254523: "" 0x8254524: "(\004\265\002" 0x8254529: "" 0x825452a: "" 0x825452b: "" 0x825452c: "\231\203`\035" 0x8254531: "" 0x8254532: "" 0x8254533: "" 0x8254534: " " 0x8254536: "\bmsg0006.gsm" 0x8254543: "" 0x8254544: "h\002\265\002" 0x8254549: "" 0x825454a: "" 0x825454b: "" 0x825454c: "$*2\037" 0x8254551: "" 0x8254552: "" 0x8254553: "" 0x8254554: " " [...] So, this time, it looks like that structure got overwritten with a listing of the voicemail directory. Unfortunately, all this is on a production server that I can't run Valgrind on. Any help would be appreciated. Thanks, Michael.