#0  0x00cae402 in __kernel_vsyscall ()
#1  0x008e9d80 in raise () from /lib/libc.so.6
#2  0x008eb691 in abort () from /lib/libc.so.6
#3  0x0092224b in __libc_message () from /lib/libc.so.6
#4  0x0092a0f1 in _int_free () from /lib/libc.so.6
#5  0x0092dbc0 in free () from /lib/libc.so.6
#6  0x080a4845 in __frame_free (fr=0x8de2f20, cache=1) at frame.c:365
#7  0x080a48a7 in ast_frame_free (frame=0x8de2f20, cache=1) at frame.c:384
#8  0x08084fd5 in ast_write (chan=0x8dd2a20, fr=0x8dfc330) at channel.c:3064
#9  0x0037c21c in moh_files_generator (chan=0x8dd2a20, data=0x8dd33d8, len=160, samples=160) at res_musiconhold.c:294
#10 0x08081de4 in ast_read_generator_actions (chan=0x8dd2a20, f=0x8d47ce4) at channel.c:2014
#11 0x080836c2 in __ast_read (chan=0x8dd2a20, dropaudio=0) at channel.c:2496
#12 0x0808394a in ast_read (chan=0x8dd2a20) at channel.c:2530
#13 0x08088dd7 in ast_generic_bridge (c0=0x8df4948, c1=0x8dd2a20, config=0xb7c7e184, fo=0xb7c7defc, rc=0xb7c7def8, bridge_end={tv_sec = 0, tv_usec = 0})
    at channel.c:4266
#14 0x0808a394 in ast_channel_bridge (c0=0x8df4948, c1=0x8dd2a20, config=0xb7c7e184, fo=0xb7c7defc, rc=0xb7c7def8) at channel.c:4609
#15 0x005ba97b in ast_bridge_call (chan=0x8df4948, peer=0x8dd2a20, config=0xb7c7e184) at res_features.c:1810
#16 0x00ddfcef in dial_exec_full (chan=0x8df4948, data=0xb7c80f18, peerflags=0xb7c7ede4, continue_exec=0x0) at app_dial.c:1814
#17 0x00ddff0a in dial_exec (chan=0x8df4948, data=0xb7c80f18) at app_dial.c:1853
#18 0x080beb30 in pbx_exec (c=0x8df4948, app=0x8d2b7d8, data=0xb7c80f18) at pbx.c:536
#19 0x080c1fc1 in pbx_extension_helper (c=0x8df4948, con=0x0, context=0x8df4ac8 "outgoing", exten=0x8df4b18 "112", priority=3, label=0x0, 
    callerid=0x8d442d8 "162", action=E_SPAWN) at pbx.c:1863
#20 0x080c2f2f in ast_spawn_extension (c=0x8df4948, context=0x8df4ac8 "outgoing", exten=0x8df4b18 "112", priority=3, callerid=0x8d442d8 "162") at pbx.c:2283
#21 0x080c3337 in __ast_pbx_run (c=0x8df4948) at pbx.c:2373
#22 0x080c4244 in pbx_thread (data=0x8df4948) at pbx.c:2600
#23 0x08103962 in dummy_start (data=0x8df6818) at utils.c:856
#24 0x00a1249b in start_thread () from /lib/libpthread.so.0
#25 0x0099242e in clone () from /lib/libc.so.6
#0  0x00cae402 in __kernel_vsyscall ()
No symbol table info available.
#1  0x008e9d80 in raise () from /lib/libc.so.6
No symbol table info available.
#2  0x008eb691 in abort () from /lib/libc.so.6
No symbol table info available.
#3  0x0092224b in __libc_message () from /lib/libc.so.6
No symbol table info available.
#4  0x0092a0f1 in _int_free () from /lib/libc.so.6
No symbol table info available.
#5  0x0092dbc0 in free () from /lib/libc.so.6
No symbol table info available.
#6  0x080a4845 in __frame_free (fr=0x8de2f20, cache=1) at frame.c:365
No locals.
#7  0x080a48a7 in ast_frame_free (frame=0x8de2f20, cache=1) at frame.c:384
	next = (struct ast_frame *) 0x0
#8  0x08084fd5 in ast_write (chan=0x8dd2a20, fr=0x8dfc330) at channel.c:3064
	res = 0
	count = 0
	f = (struct ast_frame *) 0x8de2f20
	__PRETTY_FUNCTION__ = "ast_write"
#9  0x0037c21c in moh_files_generator (chan=0x8dd2a20, data=0x8dd33d8, len=160, samples=160) at res_musiconhold.c:294
	state = (struct moh_files_state *) 0x8dd33d8
	f = (struct ast_frame *) 0x8dfc330
	res = 0
	__PRETTY_FUNCTION__ = "moh_files_generator"
#10 0x08081de4 in ast_read_generator_actions (chan=0x8dd2a20, f=0x8d47ce4) at channel.c:2014
	tmp = (void *) 0x8dd33d8
	generate = (int (*)(struct ast_channel *, void *, int, int)) 0x37c18b <moh_files_generator>
	res = 148874552
	samples = 160
	__PRETTY_FUNCTION__ = "ast_read_generator_actions"
#11 0x080836c2 in __ast_read (chan=0x8dd2a20, dropaudio=0) at channel.c:2496
	readq_tail = (struct ast_frame *) 0x0
	f = (struct ast_frame *) 0x8d47ce4
	blah = 6
	prestate = 6
	count = 0
	__PRETTY_FUNCTION__ = "__ast_read"
#12 0x0808394a in ast_read (chan=0x8dd2a20) at channel.c:2530
No locals.
#13 0x08088dd7 in ast_generic_bridge (c0=0x8df4948, c1=0x8dd2a20, config=0xb7c7e184, fo=0xb7c7defc, rc=0xb7c7def8, bridge_end={tv_sec = 0, tv_usec = 0})
    at channel.c:4266
	who = (struct ast_channel *) 0x8dd2a20
	other = (struct ast_channel *) 0x8df4948
	cs = {0x8dd2a20, 0x8df4948, 0x8df4948}
	f = (struct ast_frame *) 0x8d47ce4
	res = AST_BRIDGE_COMPLETE
	o0nativeformats = 4
	o1nativeformats = 4
	watch_c0_dtmf = 1
	watch_c1_dtmf = 2
	pvt0 = (void *) 0x8df4e10
	pvt1 = (void *) 0x8dfaa60
	frame_put_in_jb = 0
	jb_in_use = 0
	to = -1
	__PRETTY_FUNCTION__ = "ast_generic_bridge"
#14 0x0808a394 in ast_channel_bridge (c0=0x8df4948, c1=0x8dd2a20, config=0xb7c7e184, fo=0xb7c7defc, rc=0xb7c7def8) at channel.c:4609
	now = {tv_sec = 0, tv_usec = 0}
	to = -1
	who = (struct ast_channel *) 0x0
	res = AST_BRIDGE_COMPLETE
	nativefailed = 0
	firstpass = 1
	o0nativeformats = 4
	o1nativeformats = 4
	time_left_ms = 0
	caller_warning = 0 '\0'
	callee_warning = 0 '\0'
	__PRETTY_FUNCTION__ = "ast_channel_bridge"
#15 0x005ba97b in ast_bridge_call (chan=0x8df4948, peer=0x8dd2a20, config=0xb7c7e184) at res_features.c:1810
	other = (struct ast_channel *) 0x0
	f = (struct ast_frame *) 0x0
	who = (struct ast_channel *) 0xb7c7df28
	chan_featurecode = '\0' <repeats 11 times>
	peer_featurecode = '\0' <repeats 11 times>
	orig_channame = "SIP/162-08df4e10\000Nß\bñB¡\0008ßÇ·¯]n\0002]\000\000\035\000\000\000ø\235\001\000°YÞ\000¬T¡\000µGÔ\b\bßÇ·\001\000\000\000\000\000\000\000°YÞ\000\030Kß\ba\237\024\b"
	orig_peername = "SIP/112-08dfaa60\000\000\000\000ñB¡\000\000\000\000\000\000\000\000\0002]\000\000ÀÂß\b\000\000\000\000\006\000\000\000¬T¡\000\000\000\000\000\000\000\030@\001\000\000\000\000\000\000\000\004÷s\000\030Kß\ba\237\024\b"
	res = 148851136
	diff = 148129488
	hasfeatures = 0
	hadfeatures = 0
	autoloopflag = 10572972
	aoh = (struct ast_option_header *) 0xde59b0
	backup_config = {features_caller = {flags = 0}, features_callee = {flags = 0}, start_time = {tv_sec = 0, tv_usec = 0}, nexteventts = {tv_sec = 0, 
    tv_usec = 0}, partialfeature_timer = {tv_sec = 0, tv_usec = 0}, feature_timer = 0, timelimit = 0, play_warning = 0, warning_freq = 0, 
  warning_sound = 0x0, end_sound = 0x0, start_sound = 0x0, firstpass = 0, flags = 0, end_bridge_callback = 0, end_bridge_callback_data = 0x0, 
  end_bridge_callback_data_fixup = 0}
	bridge_cdr = (struct ast_cdr *) 0x8dfa048
	orig_peer_cdr = (struct ast_cdr *) 0x8df7220
	chan_cdr = (struct ast_cdr *) 0x8dd2fe8
	peer_cdr = (struct ast_cdr *) 0x8df7220
	new_chan_cdr = (struct ast_cdr *) 0x0
	new_peer_cdr = (struct ast_cdr *) 0x0
	__PRETTY_FUNCTION__ = "ast_bridge_call"
#16 0x00ddfcef in dial_exec_full (chan=0x8df4948, data=0xb7c80f18, peerflags=0xb7c7ede4, continue_exec=0x0) at app_dial.c:1814
	config = {features_caller = {flags = 2}, features_callee = {flags = 2}, start_time = {tv_sec = 1256579292, tv_usec = 428675}, nexteventts = {
    tv_sec = 0, tv_usec = 0}, partialfeature_timer = {tv_sec = 0, tv_usec = 0}, feature_timer = 0, timelimit = 0, play_warning = 0, warning_freq = 0, 
  warning_sound = 0x0, end_sound = 0x0, start_sound = 0x0, firstpass = 0, flags = 3, end_bridge_callback = 0xddb03e <end_bridge_callback>, 
  end_bridge_callback_data = 0x8df4948, end_bridge_callback_data_fixup = 0xddb1aa <end_bridge_callback_data_fixup>}
	number = 0x8d447b1 "112"
	res = 0
	u = (struct ast_module_user *) 0x8deaaa0
	rest = 0x0
	cur = 0x0
	outgoing = (struct dial_localuser *) 0x0
	peer = (struct ast_channel *) 0x8dd2a20
	to = -1
	numbusy = 0
	numcongestion = 0
	numnochan = 0
	cause = 0
	numsubst = "112\000ÈëÇ·´\023\222\000ÜêÇ··\214\024\b\024ìÇ·ÄìÇ·\000\000\000\000|ëÇ·O\000\000\000\001\200­ûÄìÇ·ÄìÇ·ÄìÇ·ÄìÇ·ßìÇ·\023íÇ·ÄìÇ·\023íÇ·", '\0' <repeats 51 times>, "3", '\0' <repeats 16 times>, "ÿÿÿÿ", '\0' <repeats 40 times>, "@\t ", '\0' <repeats 29 times>, "ôc\222\000\000\000\000\000\000\000\000\000ô\017 \000\000\000\000\000\000\000\000\000\235v\222\0004íÇ·Oct "
	cidname = '\0' <repeats 79 times>
	privdb_val = 0
	calldurationlimit = 900
	timelimit = 0
	play_warning = 0
	warning_freq = 0
	warning_sound = 0x0
	end_sound = 0x0
	start_sound = 0x0
	dtmfcalled = 0x0
	dtmfcalling = 0x0
	status = "ANSWER\000R\000GS", '\0' <repeats 244 times>
	play_to_caller = 0
	play_to_callee = 0
	sentringing = 0
	moh = 0
	outbound_group = 0x0
	result = 0
	start_time = 1256579290
	privintro = '\0' <repeats 40 times>, " EÔ\bxîÇ·%\000\000\000\000\000\000\000oíÇd\a\000\000\000\000\000\000\000ô\017 \000níÇ·\001\000\000\000ÈëÇ·1Ò\217\000ìëÇ·níÇ·\001\000\000\000\000\000\000\000³\035\230\000ô\017 \000ØæÇ·°N\224\000\003\000\000\000\231m\236\0004æÇ·0ëÇ·4ëÇ·\037Ï\217\000Se\222\000AíÇ·Ð\t\024\bq¢\222\000~}\221\000þ\t\024\b\001\000\000\000AíÇ·\000\000\000\000\033\000\000\000\003\000\000\000\030ìÇ·\000\000\000\000PìÇ·\001\000\000\000\000\000\000\000Í\214\024\bSe\222\000\000\000\000\000\030\000\000\000\000ý\000\000\000\000"...
	privcid = " ", '\0' <repeats 18 times>, "s+", '\0' <repeats 19 times>, "Í\214\024\b\000\000\000\000ßìÇ·ô\017 \000Ì\214\024\b\001\000\000\000¸êÇ·1Ò\217\000ÜêÇ·Ì\214\024\b\001", '\0' <repeats 27 times>, "\220êÇ·\000\000\000\000\000\000\000\000$êÇ·\037Ï\217", '\0' <repeats 13 times>, "+\000\000\000\000\000\000\000¼éÇ·\000\000\000\000\000\000\000\000ÿÿÿÿ\000\000\000\000>\234\023\b\000\000\000\000pëÇ·", '\0' <repeats 29 times>, "\002\b\000\000\000\000\000ÿÿÿÿË\214\024\b·\214\024\b\006", '\0' <repeats 19 times>, "\n\000\000\000\"êÇ·"
	parse = 0xb7c7e000 "SIP"
	opermode = 0
	args = {argc = 3, argv = 0xb7c7e444, peers = 0xb7c7e000 "SIP", timeout = 0xb7c7e008 "", options = 0xb7c7e009 "tTS(900", url = 0x0}
	opts = {flags = 1835008}
	opt_args = {0x0, 0x1 <Address 0x1 out of bounds>, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7c7e00d "900", 0x0}
	datastore = (struct ast_datastore *) 0x8d446b8
	fulldial = 0
	num_dialed = 1
	__PRETTY_FUNCTION__ = "dial_exec_full"
#17 0x00ddff0a in dial_exec (chan=0x8df4948, data=0xb7c80f18) at app_dial.c:1853
	peerflags = {flags = 1572864}
#18 0x080beb30 in pbx_exec (c=0x8df4948, app=0x8d2b7d8, data=0xb7c80f18) at pbx.c:536
	res = -1211625704
	saved_c_appl = 0x0
	saved_c_data = 0x0
#19 0x080c1fc1 in pbx_extension_helper (c=0x8df4948, con=0x0, context=0x8df4ac8 "outgoing", exten=0x8df4b18 "112", priority=3, label=0x0, 
    callerid=0x8d442d8 "162", action=E_SPAWN) at pbx.c:1863
	e = (struct ast_exten *) 0x8e0e4b8
	app = (struct ast_app *) 0x8d2b7d8
	res = -1211614320
	q = {incstack = {0x8df31cc "outgoing", 0x0 <repeats 127 times>}, stacklen = 1, status = 5, swo = 0x0, data = 0x0, foundcontext = 0x8df326a "local"}
	passdata = "SIP/112||tTS(900)", '\0' <repeats 8174 times>
	matching_action = 0
	__PRETTY_FUNCTION__ = "pbx_extension_helper"
#20 0x080c2f2f in ast_spawn_extension (c=0x8df4948, context=0x8df4ac8 "outgoing", exten=0x8df4b18 "112", priority=3, callerid=0x8d442d8 "162") at pbx.c:2283
No locals.
#21 0x080c3337 in __ast_pbx_run (c=0x8df4948) at pbx.c:2373
	dst_exten = '\0' <repeats 12 times>, "\220;È·(3È·Ð\2338\000\0202È·\2202È·\200\000\000\000\000\000\000\000\0202È·\2202È·\2004È·\200\215¡\000À=È·ü2È·<3È·q¢\222\000\0243È·\000\000\000\000\0303È·T3È·\000\000\000\000X3È· 3È·$3È·\\3È·", '\0' <repeats 24 times>, "\020\000\000\000H! \000\000\000\000\000`3È·O9\020\b\000\000\000\000\000\000\000\000ô\017¢\000\220\216¡\000\000\000\000@", '\0' <repeats 28 times>, "\0243È·\000\000\000\000\0303È· \177\222\000\f\000\000\000(3È\000 3È·ô\017 \000@!"...
	pos = 0
	digit = 0
	found = 1
	res = 0
	autoloopflag = 0
	error = 0
	emc = 0x0
	__PRETTY_FUNCTION__ = "__ast_pbx_run"
#22 0x080c4244 in pbx_thread (data=0x8df4948) at pbx.c:2600
	c = (struct ast_channel *) 0x8df4948
#23 0x08103962 in dummy_start (data=0x8df6818) at utils.c:856
	__cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {10620916, 0, -1211614320, -1211616312, 2068239789, -996220929}, __mask_was_saved = 0}}, 
  __pad = {0xb7c83480, 0x0, 0x0, 0x0}}
	__cancel_routine = (void (*)(void *)) 0x806794d <ast_unregister_thread>
	__cancel_arg = (void *) 0xb7c83b90
	not_first_call = 0
	ret = (void *) 0x9d1f3e
	a = {start_routine = 0x80c422d <pbx_thread>, data = 0x8df4948, 
  name = 0x8de5800 "pbx_thread", ' ' <repeats 11 times>, "started at [ 2624] pbx.c ast_pbx_start()"}
#24 0x00a1249b in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#25 0x0099242e in clone () from /lib/libc.so.6
No symbol table info available.

Thread 1 (process 23858):
#0  0x00cae402 in __kernel_vsyscall ()
#1  0x008e9d80 in raise () from /lib/libc.so.6
#2  0x008eb691 in abort () from /lib/libc.so.6
#3  0x0092224b in __libc_message () from /lib/libc.so.6
#4  0x0092a0f1 in _int_free () from /lib/libc.so.6
#5  0x0092dbc0 in free () from /lib/libc.so.6
#6  0x080a4845 in __frame_free (fr=0x8de2f20, cache=1) at frame.c:365
#7  0x080a48a7 in ast_frame_free (frame=0x8de2f20, cache=1) at frame.c:384
#8  0x08084fd5 in ast_write (chan=0x8dd2a20, fr=0x8dfc330) at channel.c:3064
#9  0x0037c21c in moh_files_generator (chan=0x8dd2a20, data=0x8dd33d8, len=160, samples=160) at res_musiconhold.c:294
#10 0x08081de4 in ast_read_generator_actions (chan=0x8dd2a20, f=0x8d47ce4) at channel.c:2014
#11 0x080836c2 in __ast_read (chan=0x8dd2a20, dropaudio=0) at channel.c:2496
#12 0x0808394a in ast_read (chan=0x8dd2a20) at channel.c:2530
#13 0x08088dd7 in ast_generic_bridge (c0=0x8df4948, c1=0x8dd2a20, config=0xb7c7e184, fo=0xb7c7defc, rc=0xb7c7def8, bridge_end={tv_sec = 0, tv_usec = 0})
    at channel.c:4266
#14 0x0808a394 in ast_channel_bridge (c0=0x8df4948, c1=0x8dd2a20, config=0xb7c7e184, fo=0xb7c7defc, rc=0xb7c7def8) at channel.c:4609
#15 0x005ba97b in ast_bridge_call (chan=0x8df4948, peer=0x8dd2a20, config=0xb7c7e184) at res_features.c:1810
#16 0x00ddfcef in dial_exec_full (chan=0x8df4948, data=0xb7c80f18, peerflags=0xb7c7ede4, continue_exec=0x0) at app_dial.c:1814
#17 0x00ddff0a in dial_exec (chan=0x8df4948, data=0xb7c80f18) at app_dial.c:1853
#18 0x080beb30 in pbx_exec (c=0x8df4948, app=0x8d2b7d8, data=0xb7c80f18) at pbx.c:536
#19 0x080c1fc1 in pbx_extension_helper (c=0x8df4948, con=0x0, context=0x8df4ac8 "outgoing", exten=0x8df4b18 "112", priority=3, label=0x0, 
    callerid=0x8d442d8 "162", action=E_SPAWN) at pbx.c:1863
#20 0x080c2f2f in ast_spawn_extension (c=0x8df4948, context=0x8df4ac8 "outgoing", exten=0x8df4b18 "112", priority=3, callerid=0x8d442d8 "162") at pbx.c:2283
#21 0x080c3337 in __ast_pbx_run (c=0x8df4948) at pbx.c:2373
#22 0x080c4244 in pbx_thread (data=0x8df4948) at pbx.c:2600
#23 0x08103962 in dummy_start (data=0x8df6818) at utils.c:856
#24 0x00a1249b in start_thread () from /lib/libpthread.so.0
#25 0x0099242e in clone () from /lib/libc.so.6