Core was generated by `/usr/sbin/asterisk -U asterisk -G asterisk -vvvg -c'.
Program terminated with signal 11, Segmentation fault.
#0  0x080827f4 in __ast_pthread_mutex_unlock (filename=0x814f114 "channel.c", lineno=1665, func=0x81509c9 "ast_waitfor_nandfds", 
    mutex_name=0x81509dd "&c[x]->lock", t=0xa889480) at /usr/src/asterisk/asterisk/include/asterisk/lock.h:452
452		if (t->reentrancy && (t->thread[t->reentrancy-1] != pthread_self())) {

(gdb) p t->reentrancy
$1 = 1638392
(gdb) p t->thread
$2 = {1572872, 4294443016, 4293459944, 524296, 524296, 1572888, 1572888, 524296, 524312, 4294443016}
(gdb) p t->thread[t->reentrancy-1]
Cannot access memory at address 0xaec94f4

(gdb) bt
#0  0x080827f4 in __ast_pthread_mutex_unlock (filename=0x814f114 "channel.c", lineno=1665, func=0x81509c9 "ast_waitfor_nandfds", 
    mutex_name=0x81509dd "&c[x]->lock", t=0xa889480) at /usr/src/asterisk/asterisk/include/asterisk/lock.h:452
#1  0x08087214 in ast_waitfor_nandfds (c=0xb7035b60, n=2, fds=0x0, nfds=0, exception=0x0, outfd=0x0, ms=0xb7037310) at channel.c:1665
#2  0x080877ca in ast_waitfor_n (c=0xb7035b60, n=2, ms=0xb7037310) at channel.c:1764
#3  0x08077dad in autoservice_run (ign=0x0) at autoservice.c:104
#4  0x0811a61d in dummy_start (data=0x94858b0) at utils.c:852
#5  0x0080b45b in start_thread () from /lib/libpthread.so.0
#6  0x0076324e in clone () from /lib/libc.so.6


(gdb) bt full
#0  0x080827f4 in __ast_pthread_mutex_unlock (filename=0x814f114 "channel.c", lineno=1665, func=0x81509c9 "ast_waitfor_nandfds", 
    mutex_name=0x81509dd "&c[x]->lock", t=0xa889480) at /usr/src/asterisk/asterisk/include/asterisk/lock.h:452
	res = 22
	canlog = 0
	__PRETTY_FUNCTION__ = "__ast_pthread_mutex_unlock"
#1  0x08087214 in ast_waitfor_nandfds (c=0xb7035b60, n=2, fds=0x0, nfds=0, exception=0x0, outfd=0x0, ms=0xb7037310) at channel.c:1665
	start = {tv_sec = 0, tv_usec = 0}
	pfds = (struct pollfd *) 0xb70359d0
	res = 135584396
	rms = -1224516920
	x = 0
	y = -1224516824
	max = 134708230
	sz = 16
	now = 0
	whentohangup = 0
	diff = 93
	winner = (struct ast_channel *) 0x0
	fdmap = (struct fdmap *) 0xb7035940
	__PRETTY_FUNCTION__ = "ast_waitfor_nandfds"
#2  0x080877ca in ast_waitfor_n (c=0xb7035b60, n=2, ms=0xb7037310) at channel.c:1764
No locals.
#3  0x08077dad in autoservice_run (ign=0x0) at autoservice.c:104
	chan = (struct ast_channel *) 0xb4a11998
	as = (struct asent *) 0x0
	ms = 500
	mons = {0xa889408, 0xb4a11998, 0xb4f6c138, 0x94cdf28, 0x0 <repeats 1368 times>, 0x7b6620, 0x0, 0x7b6620, 0x7d2120, 0x21, 0x7d2144, 
  0x7d2144, 0x0, 0x7d2150, 0x30, 0x0, 0x0, 0x0, 0x0, 0x6f9e9b, 0x7d0ff4, 0x7d2120, 0x828, 0xb70371cc, 0x6fbcfd, 0x0, 0x0, 0x0, 0x0, 0x0, 
  0x0, 0x0, 0x0, 0x7d2178, 0xb70371b7, 0x7d2550, 0x7d2150, 0x0, 0x0, 0x840, 0x830, 0x0, 0x7d2150, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 
  0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d0ff4, 0x7d2120, 0x828, 0x94896a0, 0x6fd117, 0x94896a0, 0x0, 
  0x82c, 0x1e969, 0x9489698, 0x828, 0x819ff4, 0x814a7d5, 0x814a82d, 0xb7037238, 0x8118490, 0x1, 0x828, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80feca, 
  0x7d2128, 0x0, 0x0, 0x80fe45, 0xb7037b90, 0x80d391, 0xb7037268, 0x6fbbb1, 0x80e48c, 0x8119c8a, 0xb7037278, 0x1, 0x80e48c, 0xb7037b90, 
  0x814a7d5, 0x814a82d, 0xb7037268, 0xb70372d7, 0x7d2550, 0x7d2150, 0x80e48c, 0x828, 0x68, 0x58, 0xb7037288, 0x7d2150, 0x4, 0x0, 
  0xb7037298, 0x80e880, 0xb70372f8, 0x806a6c3, 0x8176108, 0x814a7d4, 0x137, 0x814a9dc, 0x814a9f0, 0x8176108, 0xb70372f8, 0x8118490, 0x1, 
  0xb, 0x0, 0x0}
	x = 2
	__PRETTY_FUNCTION__ = "autoservice_run"
#4  0x0811a61d in dummy_start (data=0x94858b0) at utils.c:852
	__cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {8495092, 0, -1224508528, -1224510552, -554786575, 1643935450}, 
      __mask_was_saved = 0}}, __pad = {0xb7037460, 0x0, 0x0, 0x0}}
	__cancel_routine = (void (*)(void *)) 0x806a975 <ast_unregister_thread>
	__cancel_arg = (void *) 0xb7037b90
	not_first_call = 0
	ret = (void *) 0x0
	a = {start_routine = 0x8077cb0 <autoservice_run>, data = 0x0, 
  name = 0x94858c0 "autoservice_run      started at [  194] autoservice.c ast_autoservice_start()"}
	lock_info = (struct thr_lock_info *) 0x94896a0
---Type <return> to continue, or q <return> to quit---  
	mutex_attr = {__size = "\001\000\000", __align = 1}
#5  0x0080b45b in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#6  0x0076324e in clone () from /lib/libc.so.6
No symbol table info available.