Console output:
    -- Executing [17189282005@xyz:1] Dial("SIP/xyz112201-081d9480", "Local/111@fork-xyz&Local/650@fork-xyz&Local/101@fork-xyz|10") in new stack
    -- Called 111@fork-xyz
    -- Called 650@fork-xyz
    -- Executing [111@fork-xyz:1] Dial("Local/111@fork-xyz-82c9,2", "SIP/xyz011101|10") in new stack
    -- Called 101@fork-xyz
    -- Executing [650@fork-xyz:1] Dial("Local/650@fork-xyz-3fcd,2", "SIP/poly_650_01|10") in new stack
    -- Executing [101@fork-xyz:1] Dial("Local/101@fork-xyz-f441,2", "SIP/xyz010101|10") in new stack
    -- Called poly_650_01
    -- Called xyz010101
    -- Called xyz011101
    -- SIP/poly_650_01-081ed480 is ringing
    -- Local/650@fork-xyz-3fcd,1 is ringing
    -- SIP/xyz011101-0818fc18 is ringing
    -- Local/111@fork-xyz-82c9,1 is ringing
    -- SIP/xyz010101-b74007f8 is ringing
    -- Local/101@fork-xyz-f441,1 is ringing
    -- SIP/xyz010101-b74007f8 answered Local/101@fork-xyz-f441,2
    -- Local/101@fork-xyz-f441,1 stopped sounds
    -- Local/101@fork-xyz-f441,1 answered SIP/xyz112201-081d9480
  == Spawn extension (fork-xyz, 650, 1) exited non-zero on 'Local/650@fork-xyz-3fcd,2'
  == Spawn extension (fork-xyz, 111, 1) exited non-zero on 'Local/111@fork-xyz-82c9,2'
    -- Packet2Packet bridging SIP/xyz112201-081d9480 and SIP/xyz010101-b74007f8
  == Spawn extension (fork-xyz, 101, 1) exited non-zero on 'Local/101@fork-xyz-f441,2'


Backtrace:

(gdb) bt full
#0  0x0807bc2c in ast_cdr_start (cdr=0x4f0) at cdr.c:693
	__p = 0
	__x = 136213360
	chan = 0x81e7370 "Local/101@fork-xyz-3a80,1"
#1  0x0807d28f in ast_cdr_specialized_reset (cdr=0x81e7230, _flags=0x0) at cdr.c:1090
	flags = {flags = 0}
#2  0xb7a52497 in ast_bridge_call (chan=0x81e0590, peer=0x81e6d78, config=0xb75515a0) at res_features.c:1696
	f = (struct ast_frame *) 0x0
	who = (struct ast_channel *) 0x81e6d78
	chan_featurecode = '\0' <repeats 11 times>
	peer_featurecode = '\0' <repeats 11 times>
	orig_channame = "SIP/xyz112201-081db8e0\000\000\000\000\000\000\030\000\000\000\000\004\000\0008!\036\bX\023U·Û¶\b\b]!\036\bG]î·\001\000\000\000-\000\000\000»Ò\022\b\021\003Þ·X\023U·DÜ|·"
	orig_peername = "Local/101@fork-xyz-3a80,1\000U·6\237Ý·@\030ê·&\000\000\000\001\000\000\0008!\036\bÐ9\000\000&\000\000\0000ö\036\bDÜ|·xm\036\b°kU·(\023U·\023Ö\017\b"
	res = -1
	diff = 48
	hasfeatures = 0
	hadfeatures = 0
	aoh = (struct ast_option_header *) 0x0
	backup_config = {features_caller = {flags = 0}, features_callee = {flags = 0}, start_time = {tv_sec = 0, tv_usec = 0}, feature_timer = 0, timelimit = 0, play_warning = 0, 
  warning_freq = 0, warning_sound = 0x0, end_sound = 0x0, start_sound = 0x0, firstpass = 0, flags = 0}
	bridge_cdr = (struct ast_cdr *) 0x81eca50
	orig_peer_cdr = (struct ast_cdr *) 0x81e7230
	__PRETTY_FUNCTION__ = "ast_bridge_call"
#3  0xb77c7fe4 in dial_exec_full (chan=0x81e0590, data=0xb7554040, peerflags=0xb7551f00, continue_exec=0x0) at app_dial.c:1780
	config = {features_caller = {flags = 0}, features_callee = {flags = 0}, start_time = {tv_sec = 1220632995, tv_usec = 491403}, feature_timer = 0, timelimit = 0, 
  play_warning = 0, warning_freq = 0, warning_sound = 0x0, end_sound = 0x0, start_sound = 0x0, firstpass = 0, flags = 0}
	number = 0x81e80f1 "101@fork-xyz"
	end_time = 0
	answer_time = 1220632995
	res = 0
	u = (struct ast_module_user *) 0x81d6668
	rest = 0x0
	cur = 0x0
	outgoing = (struct dial_localuser *) 0x0
	peer = (struct ast_channel *) 0x81e6d78
	to = 7512
	numbusy = 0
	numcongestion = 0
	numnochan = 0
	cause = 0
	numsubst = "101@fork-xyz\000I<\a\221ÿ{·ø_ñ·¤®\032\bÄI<\a\230\036U·_uð·\020ü{·T\036U·Hfñ·\006\000\000\000\b°\032\b\001\000\000\000\000\000\000\000\001\000\000\000\f\000\000\000\005\000\000\000\b\000\000\000Hfñ·\005\000\000\000T\036U·\001\000\000\000ÀÇÿÿT\036U·7°\006\b\n\000\000\000 aÁH\000\000\000\000\000\000\000\000\220?U·\000\000\000\000À\036U·ø¬\032\b\221ÿ{·°kU·8\037U·Õ\034\v\b\005\000\000\000øÖ×·@\032ï·WO\023\b\2208\023\be\021\036\b¨\036U·Å\235\006\b\177    -- "...
	cidname = '\0' <repeats 79 times>
	privdb_val = 0
	calldurationlimit = 0
	timelimit = 0
	play_warning = 0
	warning_freq = 0
	warning_sound = 0x0
	end_sound = 0x0
	start_sound = 0x0
	dtmfcalled = 0x0
	dtmfcalling = 0x0
	status = "ANSWER\000R\000GS", '\0' <repeats 244 times>
	play_to_caller = 0
	play_to_callee = 0
	sentringing = 0
	moh = 0
	outbound_group = 0x0
	result = 0
	start_time = 1220632992
	privintro = "F\000\021\000¤\201\000\000\001", '\0' <repeats 23 times>, "¿\r\000\000\000\000\000\000\000\020\000\000\b\000\000\000\000\000\000\000\206aÁH\002\000\000\000\002\000\000\000\000\000\000\000HM%F\000\000\000\000F\000\021\000\000\000\000\000\200\030U·\001¢Ý·@\030ê·\017\000\000\000üÿé·\017\000\000\000©1é· \030U·\006îÝ·xi\027\b©1é·\017\000\000\000üÿé·©1é·\000\000\000\000\000\000\000\000ÿÿÿÿ\n\031U·\000\000\000\000\002", '\0' <repeats 11 times>, "ÿ\034U·\b\000\000\000\000\000\000\000\f\000\000\000àñé·öÿÿÿ", '\0' <repeats 12 times>, "\004xÝ·\000\000\000\000"...
	privcid = "©1é·\204\027U·´$ß·©1é·\000\000\000\000\000\000\000\000ÔuÜ·°¤\023\b.\000\000\000H\017Û·ä\034U·´\030U·qO\023\bh\035U·÷\bÛ·\204\035U·qO\023\b\000\000\000\000\2228\023\b\001\000\000\000\000\000\000\000©1é·\001\b\000\000\000\000\000\000\000\000\000\000\034ëâ·üÿé·\000\000\000\000ð\035U·\220\027U·\000\000\000\000\n\031U·\034\031U·Ò\222ß·ý\034U·\n\031U·\002\000\000\000H\017Û·T\201Ý·$\031U·Äß\bF\000\000\000\000HM%FÀ é·F\000\021\000\000\000\000\000ä\027U·\001¢Ý·@\030ê·\017\000\000\000"...
	parse = 0xb7551450 "Local"
	opermode = 0
	args = {argc = 2, argv = 0xb75516e4, peers = 0xb7551450 "Local", timeout = 0xb7551489 "10", options = 0x0, url = 0x0}
	opts = {flags = 0}
	opt_args = {0x0, 0xdbf <Address 0xdbf out of bounds>, 0xb7eea480 "U\211å\213M\b\213QH\213B\004H\211B\004\205Àu\rÇB\b", 0x8176d70 "\204<­û", 0x0, 
  0xb7556450 "\211\230\006\b°kU·", 0x48c16186 <Address 0x48c16186 out of bounds>, 0x0, 0x4608dfc4 <Address 0x4608dfc4 out of bounds>}
	datastore = (struct ast_datastore *) 0x81e0440
	ds_caller_features = (struct ast_datastore *) 0x81dd280
	ds_callee_features = (struct ast_datastore *) 0x81ecff8
	caller_features = (struct ast_dial_features *) 0x81e0410
	fulldial = 0
	num_dialed = 3
	__PRETTY_FUNCTION__ = "dial_exec_full"
#4  0xb77c8310 in dial_exec (chan=0x81e0590, data=0xb7554040) at app_dial.c:1834
	peerflags = {flags = 0}
#5  0x080bcfad in pbx_exec (c=0x81e0590, app=0x8189ea0, data=0xb7554040) at /root/src/voip/asterisk-svn/branches/1.4/include/asterisk/strings.h:35
	res = -1219158128
	saved_c_appl = 0x0
	saved_c_data = 0x0
#6  0x080c01c6 in pbx_extension_helper (c=0x81e0590, con=0x0, context=0x81e0710 "xyz", exten=0x81e0760 "17189282005", priority=1, label=0x0, callerid=0x81d6588 "1122", 
    action=E_SPAWN) at pbx.c:1862
	e = (struct ast_exten *) 0x81931d0
	app = (struct ast_app *) 0x8189ea0
	res = 8
	q = {incstack = {0x0 <repeats 128 times>}, stacklen = 0, status = 5, swo = 0x0, data = 0x0, foundcontext = 0x81e0710 "xyz"}
	passdata = "Local/111@fork-xyz&Local/650@fork-xyz&Local/101@fork-xyz|10", '\0' <repeats 8132 times>
	matching_action = 0
	__PRETTY_FUNCTION__ = "pbx_extension_helper"
#7  0x080c126c in ast_spawn_extension (c=0x81e0590, context=0x81e0710 "xyz", exten=0x81e0760 "17189282005", priority=1, callerid=0x81d6588 "1122") at pbx.c:2317
No locals.
#8  0x080c169a in __ast_pbx_run (c=0x81e0590) at pbx.c:2406
	dst_exten = '\0' <repeats 128 times>, "H\030ê·\000\000\000\000\020\000\000\000\000\000\000\000\220nÝ·\000\000\000\000\f\000\000\000üÿé·@\030ê·øM\036\bØcU·6\237Ý·@\030ê·\f\000\000\000\000\000\000\000\210f\035\b\bâ\000\000\f\000\000\000øM\036\bôßî·\000\000\000\000G]î·\bdU·\023Ö\017\b\001\000\000\000\f\000\000\000\000\000\000\000\210f\035\b\000\000\000\000°kU·\bdU·é\226\006\b"
	pos = 0
	digit = 0
	found = 1
	res = 0
	autoloopflag = 0
	error = 0
	__PRETTY_FUNCTION__ = "__ast_pbx_run"
#9  0x080c23af in pbx_thread (data=0x81e0590) at pbx.c:2621
	c = (struct ast_channel *) 0x81e0590
#10 0x080fe4a7 in dummy_start (data=0x81d6688) at utils.c:912
	_buffer = {__routine = 0x8069889 <ast_unregister_thread>, __arg = 0xb7556bb0, __canceltype = 0, __prev = 0x0}
	ret = (void *) 0x0
	a = {start_routine = 0x80c2398 <pbx_thread>, data = 0x81e0590, name = 0x81e02b0 "pbx_thread", ' ' <repeats 11 times>, "started at [ 2645] pbx.c ast_pbx_start()"}
#11 0xb7ee420e in start_thread () from /lib/tls/libpthread.so.0
No symbol table info available.
#12 0xb7e3e0de in clone () from /lib/tls/libc.so.6
No symbol table info available.