#0  0x00002aaab2d20593 in local_ast_moh_start (chan=0x16811500, mclass=0xcd0e6060 <Address 0xcd0e6060 out of bounds>, interpclass=0x0) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/strings.h:50
#1  0x000000000045da22 in ast_moh_start (chan=0x16811500, mclass=0xcd0e6060 <Address 0xcd0e6060 out of bounds>, interpclass=0x0) at channel.c:5467
#2  0x00002aaaba66074b in local_indicate (ast=0x16811500, condition=16, data=0xcd0e6060, datalen=0) at chan_local.c:417
#3  0x00000000004547c2 in ast_indicate_data (chan=0x16811500, _condition=16, data=0xcd0e6060, datalen=0) at channel.c:3098
#4  0x000000000045ae4d in ast_generic_bridge (c0=0x16811500, c1=0x168ff5f0, config=0x4177f130, fo=0x4177e258, rc=0x4177e250, bridge_end={tv_sec = 0, tv_usec = 0}) at channel.c:4821
#5  0x000000000045cde2 in ast_channel_bridge (c0=0x16811500, c1=0x168ff5f0, config=0x4177f130, fo=0x4177e258, rc=0x4177e250) at channel.c:5199
#6  0x0000000000489708 in ast_bridge_call (chan=0x16811500, peer=0x168ff5f0, config=0x4177f130) at features.c:2544
#7  0x00002aaac660a6e5 in dial_exec_full (chan=0x16811500, data=0x417818e0, peerflags=0x4177f6a0, continue_exec=0x0) at app_dial.c:2052
#8  0x00002aaac660af1f in dial_exec (chan=0x16811500, data=0x417818e0) at app_dial.c:2136
#9  0x00000000004b976c in pbx_exec (c=0x16811500, app=0x2aaaac069650, data=0x417818e0) at pbx.c:960
#10 0x00000000004c0f95 in pbx_extension_helper (c=0x16811500, con=0x0, context=0x168118b8 "pstn2", exten=0x16811908 "90990672", priority=2, label=0x0, callerid=0x16918460 "38051893", action=E_SPAWN, found=0x41783fc4, combined_find_spawn=1) at pbx.c:3219
#11 0x00000000004c259c in ast_spawn_extension (c=0x16811500, context=0x168118b8 "pstn2", exten=0x16811908 "90990672", priority=2, callerid=0x16918460 "38051893", found=0x41783fc4, combined_find_spawn=1) at pbx.c:3675
#12 0x00000000004c2cea in __ast_pbx_run (c=0x16811500, args=0x0) at pbx.c:3764
#13 0x00000000004c4287 in pbx_thread (data=0x16811500) at pbx.c:4051
#14 0x00000000005191a7 in dummy_start (data=0x169184c0) at utils.c:968
#15 0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#16 0x00000030758d3c2d in clone () from /lib64/libc.so.6
#0  0x00002aaab2d20593 in local_ast_moh_start (chan=0x16811500, mclass=0xcd0e6060 <Address 0xcd0e6060 out of bounds>, interpclass=0x0) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/strings.h:50
	mohclass = (struct mohclass *) 0x0
	state = (struct moh_files_state *) 0x0
	var = (struct ast_variable *) 0x0
	res = 1098373328
	realtime_possible = 0
	__PRETTY_FUNCTION__ = "local_ast_moh_start"
	__FUNCTION__ = "local_ast_moh_start"
#1  0x000000000045da22 in ast_moh_start (chan=0x16811500, mclass=0xcd0e6060 <Address 0xcd0e6060 out of bounds>, interpclass=0x0) at channel.c:5467
	__PRETTY_FUNCTION__ = "ast_moh_start"
#2  0x00002aaaba66074b in local_indicate (ast=0x16811500, condition=16, data=0xcd0e6060, datalen=0) at chan_local.c:417
	p = (struct local_pvt *) 0x169134d0
	res = 0
	f = {frametype = AST_FRAME_CONTROL, subclass = 0, datalen = 0, samples = 0, mallocd = 0, mallocd_hdr_len = 0, offset = 0, src = 0x0, data = {ptr = 0x0, uint32 = 0, pad = "\000\000\000\000\000\000\000"}, delivery = {tv_sec = 0, tv_usec = 0}, frame_list = {
    next = 0x0}, flags = 0, ts = 0, len = 0, seqno = 0}
	isoutbound = 0
#3  0x00000000004547c2 in ast_indicate_data (chan=0x16811500, _condition=16, data=0xcd0e6060, datalen=0) at channel.c:3098
	condition = AST_CONTROL_HOLD
	ts = (const struct tone_zone_sound *) 0x0
	res = -1
	__PRETTY_FUNCTION__ = "ast_indicate_data"
#4  0x000000000045ae4d in ast_generic_bridge (c0=0x16811500, c1=0x168ff5f0, config=0x4177f130, fo=0x4177e258, rc=0x4177e250, bridge_end={tv_sec = 0, tv_usec = 0}) at channel.c:4821
	bridge_exit = 0
	who = (struct ast_channel *) 0x168ff5f0
	other = (struct ast_channel *) 0x16811500
	cs = {0x16811500, 0x168ff5f0, 0x168ff5f0}
	f = (struct ast_frame *) 0x2aaacda4cc10
	res = AST_BRIDGE_COMPLETE
	o0nativeformats = 64
	o1nativeformats = 8
	watch_c0_dtmf = 0
	watch_c1_dtmf = 0
	pvt0 = (void *) 0x169134d0
	pvt1 = (void *) 0x1c5f
	frame_put_in_jb = 0
	jb_in_use = 0
	to = -1
	__PRETTY_FUNCTION__ = "ast_generic_bridge"
#5  0x000000000045cde2 in ast_channel_bridge (c0=0x16811500, c1=0x168ff5f0, config=0x4177f130, fo=0x4177e258, rc=0x4177e250) at channel.c:5199
	now = {tv_sec = 0, tv_usec = 0}
	to = -1
	who = (struct ast_channel *) 0x0
	res = AST_BRIDGE_COMPLETE
	nativefailed = 0
	firstpass = 1
	o0nativeformats = 64
	o1nativeformats = 8
	time_left_ms = 0
	caller_warning = 0 '\0'
	callee_warning = 0 '\0'
	__PRETTY_FUNCTION__ = "ast_channel_bridge"
#6  0x0000000000489708 in ast_bridge_call (chan=0x16811500, peer=0x168ff5f0, config=0x4177f130) at features.c:2544
	other = (struct ast_channel *) 0x2aaac660fde2
	f = (struct ast_frame *) 0x0
	who = (struct ast_channel *) 0x0
	chan_featurecode = '\0' <repeats 11 times>
	peer_featurecode = '\0' <repeats 11 times>
	orig_channame = "Local/90990672@pstn-c466;2\000A\000\000\000\0000�wA\000\000\000\000��wA", '\0' <repeats 20 times>, "\b�wA\000\000\000\000��wA\000\000\000"
	orig_peername = "IAX2/pstn2-7263\000��V\000\000\000\000\000��V\000\000\000\000\000\000\000\000\000\022!\000\000�GV\000\000\000\000\000%�V\000\000\000\000\000�)�u\000\b\000\000\220�wA\000\000\000\000\220\002\221\026\000\000\000"
	res = 0
	diff = 394340095
	hasfeatures = 0
	hadfeatures = 0
	autoloopflag = 0
	aoh = (struct ast_option_header *) 0x4177e2e0
	backup_config = {features_caller = {flags = 0}, features_callee = {flags = 0}, start_time = {tv_sec = 0, tv_usec = 0}, nexteventts = {tv_sec = 0, tv_usec = 0}, partialfeature_timer = {tv_sec = 0, tv_usec = 0}, feature_timer = 0, timelimit = 0, play_warning = 0, 
  warning_freq = 0, warning_sound = 0x0, end_sound = 0x0, start_sound = 0x0, firstpass = 0, flags = 0, end_bridge_callback = 0, end_bridge_callback_data = 0x0, end_bridge_callback_data_fixup = 0}
	bridge_cdr = (struct ast_cdr *) 0x16907800
	orig_peer_cdr = (struct ast_cdr *) 0x168ffb00
	chan_cdr = (struct ast_cdr *) 0x16811a10
	peer_cdr = (struct ast_cdr *) 0x168ffb00
	new_chan_cdr = (struct ast_cdr *) 0x0
	new_peer_cdr = (struct ast_cdr *) 0x0
	__PRETTY_FUNCTION__ = "ast_bridge_call"
#7  0x00002aaac660a6e5 in dial_exec_full (chan=0x16811500, data=0x417818e0, peerflags=0x4177f6a0, continue_exec=0x0) at app_dial.c:2052
	number = 0x178126f1 "pstn2/90990672"
	res = 0
	rest = 0x0
	cur = 0x0
	outgoing = (struct chanlist *) 0x0
	peer = (struct ast_channel *) 0x168ff5f0
	to = -1
	num = {chan = 0x16811500, busy = 0, congestion = 0, nochan = 0}
	cause = 0
	numsubst = "pstn2/90990672\000\000��wA\000\000\000\000]\033V\000\000\000\000\0003\000\000\000\000\000\000\000\000\020\000\000\000\000\000\000P�wA\000\000\000\000\212\230\206u0\000\000\000\001\200��\000\000\000\000t\003\221\026\000\000\000\000t\003\221\026\000\000\000\000t\003\221\026\000\000\000\000t\003\221\026\000\000\000\000v\003\221\026\000\000\000\000�\003\221\026\000\000\000\000t\003\221\026\000\000\000\000�\003\221\026", '\0' <repeats 44 times>, "��wA", '\0' <repeats 28 times>, "����\000\000\000\000\t\000\000\000\000\000\000\000�\004\221\026", '\0' <repeats 20 times>, "�\003\221\026\000\000\000"
	cidname = '\0' <repeats 79 times>
	config = {features_caller = {flags = 0}, features_callee = {flags = 0}, start_time = {tv_sec = 1269599964, tv_usec = 349892}, nexteventts = {tv_sec = 0, tv_usec = 0}, partialfeature_timer = {tv_sec = 0, tv_usec = 0}, feature_timer = 0, timelimit = 0, 
  play_warning = 0, warning_freq = 0, warning_sound = 0x0, end_sound = 0x0, start_sound = 0x0, firstpass = 0, flags = 0, end_bridge_callback = 0x2aaac660600b <end_bridge_callback>, end_bridge_callback_data = 0x16811500, 
  end_bridge_callback_data_fixup = 0x2aaac6606120 <end_bridge_callback_data_fixup>}
	calldurationlimit = {tv_sec = 0, tv_usec = 0}
	dtmfcalled = 0x0
	dtmfcalling = 0x0
	pa = {sentringing = 0, privdb_val = 0, privcid = '\0' <repeats 255 times>, privintro = '\0' <repeats 1023 times>, status = "ANSWER\000R\000GS", '\0' <repeats 244 times>}
	sentringing = 0
	moh = 0
	outbound_group = 0x0
	result = 0
	parse = 0x4177e400 "IAX2"
	opermode = 0
	delprivintro = 0
	args = {argc = 1, argv = 0x4177eae8, peers = 0x4177e400 "IAX2", timeout = 0x0, options = 0x0, url = 0x0}
	opts = {flags = 0}
	opt_args = {0x6b <Address 0x6b out of bounds>, 0x307584353f "H9�\017\205����Hc\225��������\177H)�H9�\017\207����\213\205����D)�D\001�\211\205����A\200}", 0x15 <Address 0x15 out of bounds>, 0x4177f0e0 "", 0x2aaac3397fcc "s\r\n", 0x4177ec00 "", 0x0, 0x0, 0x0, 
  0x4177f2c0 "��wA", 0x55f5cc "%s", 0x4177f130 ""}
	datastore = (struct ast_datastore *) 0x1684c8b0
	fulldial = 0
	num_dialed = 1
	__PRETTY_FUNCTION__ = "dial_exec_full"
#8  0x00002aaac660af1f in dial_exec (chan=0x16811500, data=0x417818e0) at app_dial.c:2136
	peerflags = {flags = 4294967296}
#9  0x00000000004b976c in pbx_exec (c=0x16811500, app=0x2aaaac069650, data=0x417818e0) at pbx.c:960
	res = 10922
	u = (struct ast_module_user *) 0x169104b0
	saved_c_appl = 0x0
	saved_c_data = 0x0
	__PRETTY_FUNCTION__ = "pbx_exec"
#10 0x00000000004c0f95 in pbx_extension_helper (c=0x16811500, con=0x0, context=0x168118b8 "pstn2", exten=0x16811908 "90990672", priority=2, label=0x0, callerid=0x16918460 "38051893", action=E_SPAWN, found=0x41783fc4, combined_find_spawn=1) at pbx.c:3219
	e = (struct ast_exten *) 0x2aaaac82a5a0
	app = (struct ast_app *) 0x2aaaac069650
	res = 1971800173
	q = {incstack = {0x0 <repeats 128 times>}, stacklen = 0, status = 5, swo = 0x0, data = 0x0, foundcontext = 0x168118b8 "pstn2"}
	passdata = "IAX2/pstn2/90990672\000 90990672", '\0' <repeats 947 times>, "q�?ƪ*\000\000\035\035xA\000\000\000\000P.xA\000\000\000\000�\002L", '\0' <repeats 69 times>, "CDR(userfield)\000)", '\0' <repeats 472 times>, "�%xA\000\000\000\000^\022V\000\000\000\000\000^\022V\000\000\000\000\000\003\000\000\000\000\000\000\000?5\204u0\000\000\000\002\000\000\000\000\000\000\000�%xA\000\000\000\000\220'xA\000\000\000\000]\033V\000\000\000\000\000t\000\000\000\000\000\000\000�(\204u0\000\000\000o\000\000\000\000\000\000\000�%"...
	matching_action = 0
	__PRETTY_FUNCTION__ = "pbx_extension_helper"
#11 0x00000000004c259c in ast_spawn_extension (c=0x16811500, context=0x168118b8 "pstn2", exten=0x16811908 "90990672", priority=2, callerid=0x16918460 "38051893", found=0x41783fc4, combined_find_spawn=1) at pbx.c:3675
No locals.
#12 0x00000000004c2cea in __ast_pbx_run (c=0x16811500, args=0x0) at pbx.c:3764
	digit = 0
	invalid = 0
	timeout = 0
	dst_exten = "\000\2202A\000\000\000\000@IxA\000\000\000\000\000\020\000\000\000\000\000\000;'\207u0", '\0' <repeats 27 times>, "\r�J\000\000\000\000\000\000\000\000\000����P\000\221\026\000\000\000\0000@xA\000\000\000\000�\rK\000\000\000\000\000X\004\221\026\000\000\000\000Y\022V\000\000\000\000\000f\033V\000\000\000\000\000s3}\026\000\000\000\000�\003\221\026\000\000\000\000\b\004\221\026\000\000\000\000\004\000\000\000\000\000\000\000d3}\026\000\000\000\000\030\000\000\000\000\000\000\000\030\003\221\026", '\0' <repeats 36 times>, "�\004\221\026", '\0' <repeats 12 times>, "\030\003\221\026\000\000\000\000h\003\221\026\000\000\000\000\030\003\221\026\000"...
	pos = 0
	found = 1
	res = 0
	autoloopflag = 0
	error = 0
	__PRETTY_FUNCTION__ = "__ast_pbx_run"
#13 0x00000000004c4287 in pbx_thread (data=0x16811500) at pbx.c:4051
	c = (struct ast_channel *) 0x16811500
#14 0x00000000005191a7 in dummy_start (data=0x169184c0) at utils.c:968
	__cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {0, 3691686262009463568, 0, 1093832704, 1098402112, 4096, 3691686262009463376, 3691686263068971902}, __mask_was_saved = 0}}, __pad = {0x417841a0, 0x0, 0x167e2ba0, 0x0}}
	__cancel_routine = (void (*)(void *)) 0x432219 <ast_unregister_thread>
	__cancel_arg = (void *) 0x41784940
	not_first_call = 0
	ret = (void *) 0x3075b4d898
	a = {start_routine = 0x4c4265 <pbx_thread>, data = 0x16811500, name = 0x169184e0 "pbx_thread", ' ' <repeats 11 times>, "started at [ 4072] pbx.c ast_pbx_start()"}
#15 0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
No symbol table info available.
#16 0x00000030758d3c2d in clone () from /lib64/libc.so.6
No symbol table info available.

Thread 35 (process 23546):
#0  0x00000030758cae46 in poll () from /lib64/libc.so.6
#1  0x0000000000439e92 in monitor_sig_flags (unused=0x0) at asterisk.c:2875
#2  0x000000000043c2f7 in main (argc=3, argv=0x7fffd6e79dc8) at asterisk.c:3559
#3  0x000000307581d994 in __libc_start_main () from /lib64/libc.so.6
#4  0x0000000000419699 in SSL_accept ()
#5  0x00007fffd6e79db8 in ?? ()
Backtrace stopped: previous frame inner to this frame (corrupt stack?)

Thread 34 (process 23550):
#0  0x000000307600ad09 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x000000000050b16f in ast_cond_wait (cond=0x160161e0, t=0x16016218) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/lock.h:1751
#2  0x000000000050aff2 in tps_processing_function (data=0x160161d8) at taskprocessor.c:293
#3  0x00000000005191a7 in dummy_start (data=0x16015f00) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 33 (process 23551):
#0  0x00000030758cae46 in poll () from /lib64/libc.so.6
#1  0x0000000000434890 in listener (unused=0x0) at asterisk.c:1077
#2  0x00000000005191a7 in dummy_start (data=0x1601d010) at utils.c:968
#3  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#4  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 32 (process 23552):
#0  0x000000307600ad09 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00000000004a94d3 in ast_cond_wait (cond=0x7bfe60, t=0x7a6830) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/lock.h:1751
#2  0x00000000004a940c in logger_thread (data=0x0) at logger.c:969
#3  0x00000000005191a7 in dummy_start (data=0x1601d080) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 31 (process 23553):
#0  0x00000030758cae46 in poll () from /lib64/libc.so.6
#1  0x0000000000519517 in ast_wait_for_input (fd=9, ms=5000) at utils.c:1057
#2  0x000000000050c289 in ast_tcptls_server_root (data=0x7a9980) at tcptls.c:242
#3  0x00000000005191a7 in dummy_start (data=0x2aaaac001730) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 30 (process 23554):
#0  0x000000307600ad09 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000000000470009 in ast_cond_wait (cond=0x7bf2e0, t=0x7a3350) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/lock.h:1751
#2  0x000000000046ff8a in do_devstate_changes (data=0x0) at devicestate.c:567
#3  0x00000000005191a7 in dummy_start (data=0x2aaaac001640) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 29 (process 23555):
#0  0x000000307600ad09 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x000000000050b16f in ast_cond_wait (cond=0x2aaaac002150, t=0x2aaaac002188) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/lock.h:1751
#2  0x000000000050aff2 in tps_processing_function (data=0x2aaaac002148) at taskprocessor.c:293
#3  0x00000000005191a7 in dummy_start (data=0x2aaaac002210) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 28 (process 23556):
#0  0x00000030758cced2 in select () from /lib64/libc.so.6
#1  0x000000000048c217 in ast_select (nfds=0, rfds=0x4109ef60, wfds=0x0, efds=0x4109eee0, tvp=0x0) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/channel.h:1712
#2  0x000000000048c1d7 in do_parking_thread (ignore=0x0) at features.c:3159
#3  0x00000000005191a7 in dummy_start (data=0x2aaaac003230) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 27 (process 23557):
#0  0x000000307600ad09 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00002aaab8773008 in ast_cond_wait (cond=0x2aaab89744d0, t=0x2aaab89744a8) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/lock.h:1751
#2  0x00002aaab8772f9f in do_timing (arg=0x0) at res_timing_pthread.c:468
#3  0x00000000005191a7 in dummy_start (data=0x2aaaac022af0) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 26 (process 23922):
#0  0x000000307600ad09 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x000000000050b16f in ast_cond_wait (cond=0x2aaaac0690d0, t=0x2aaaac069108) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/lock.h:1751
#2  0x000000000050aff2 in tps_processing_function (data=0x2aaaac0690c8) at taskprocessor.c:293
#3  0x00000000005191a7 in dummy_start (data=0x2aaaac069350) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 25 (process 23923):
#0  0x000000307589a0b1 in nanosleep () from /lib64/libc.so.6
#1  0x00002aaabb06ff92 in scan_thread (unused=0x0) at pbx_spool.c:444
#2  0x00000000005191a7 in dummy_start (data=0x1603cd20) at utils.c:968
#3  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#4  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 24 (process 23924):
#0  0x00000030758cae46 in poll () from /lib64/libc.so.6
#1  0x00000000004a1d05 in ast_io_wait (ioc=0x2aaaac497920, howlong=1000) at io.c:275
#2  0x00002aaab8fe30bc in do_monitor (data=0x0) at chan_sip.c:21396
#3  0x00000000005191a7 in dummy_start (data=0x1603ecd0) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 23 (process 23925):
#0  0x00000030758cced2 in select () from /lib64/libc.so.6
#1  0x00002aaab7956404 in ast_select (nfds=0, rfds=0x409e8f70, wfds=0x0, efds=0x409e8ef0, tvp=0x0) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/channel.h:1712
#2  0x00002aaab79561c9 in do_monitor (data=0x0) at chan_phone.c:1075
#3  0x00000000005191a7 in dummy_start (data=0x2aaaac49e870) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 22 (process 23926):
#0  0x00000030758cae46 in poll () from /lib64/libc.so.6
#1  0x00000000004a1d05 in ast_io_wait (ioc=0x16867c20, howlong=1000) at io.c:275
#2  0x00002aaab6af7c9b in network_thread (ignore=0x0) at pbx_dundi.c:2102
#3  0x00000000005191a7 in dummy_start (data=0x16869e20) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 21 (process 23927):
#0  0x000000307589a0b1 in nanosleep () from /lib64/libc.so.6
#1  0x0000003075899ed4 in sleep () from /lib64/libc.so.6
#2  0x00002aaab6af7f8f in process_precache (ign=0x0) at pbx_dundi.c:2179
#3  0x00000000005191a7 in dummy_start (data=0x16867bc0) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 20 (process 23928):
#0  0x000000307589a0b1 in nanosleep () from /lib64/libc.so.6
#1  0x0000003075899ed4 in sleep () from /lib64/libc.so.6
#2  0x00002aaab6af7e3f in process_clearcache (ignore=0x0) at pbx_dundi.c:2142
#3  0x00000000005191a7 in dummy_start (data=0x168679d0) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 19 (process 23929):
#0  0x000000307600ad09 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00002aaab630a2b3 in ast_cond_wait (cond=0x1686ef58, t=0x1686ef30) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/lock.h:1751
#2  0x00002aaab633cfd1 in iax2_process_thread (data=0x1686de70) at chan_iax2.c:11021
#3  0x00000000005191a7 in dummy_start (data=0x1686ca60) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 18 (process 23930):
#0  0x000000307600ad09 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00002aaab630a2b3 in ast_cond_wait (cond=0x168700f8, t=0x168700d0) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/lock.h:1751
#2  0x00002aaab633cfd1 in iax2_process_thread (data=0x1686f010) at chan_iax2.c:11021
#3  0x00000000005191a7 in dummy_start (data=0x1686c850) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 17 (process 23931):
#0  0x000000307600ad09 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00002aaab630a2b3 in ast_cond_wait (cond=0x16871298, t=0x16871270) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/lock.h:1751
#2  0x00002aaab633cfd1 in iax2_process_thread (data=0x168701b0) at chan_iax2.c:11021
#3  0x00000000005191a7 in dummy_start (data=0x1686c870) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 16 (process 23932):
#0  0x000000307600ad09 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00002aaab630a2b3 in ast_cond_wait (cond=0x16872438, t=0x16872410) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/lock.h:1751
#2  0x00002aaab633cfd1 in iax2_process_thread (data=0x16871350) at chan_iax2.c:11021
#3  0x00000000005191a7 in dummy_start (data=0x1686a350) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 15 (process 23933):
#0  0x000000307600ad09 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00002aaab630a2b3 in ast_cond_wait (cond=0x168735d8, t=0x168735b0) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/lock.h:1751
#2  0x00002aaab633cfd1 in iax2_process_thread (data=0x168724f0) at chan_iax2.c:11021
#3  0x00000000005191a7 in dummy_start (data=0x1686a370) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 14 (process 23934):
#0  0x000000307600ad09 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00002aaab630a2b3 in ast_cond_wait (cond=0x16874778, t=0x16874750) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/lock.h:1751
#2  0x00002aaab633cfd1 in iax2_process_thread (data=0x16873690) at chan_iax2.c:11021
#3  0x00000000005191a7 in dummy_start (data=0x1686a390) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 13 (process 23935):
#0  0x000000307600ad09 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00002aaab630a2b3 in ast_cond_wait (cond=0x16875918, t=0x168758f0) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/lock.h:1751
#2  0x00002aaab633cfd1 in iax2_process_thread (data=0x16874830) at chan_iax2.c:11021
#3  0x00000000005191a7 in dummy_start (data=0x1686a9a0) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 12 (process 23936):
#0  0x000000307600ad09 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00002aaab630a2b3 in ast_cond_wait (cond=0x16876ab8, t=0x16876a90) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/lock.h:1751
#2  0x00002aaab633cfd1 in iax2_process_thread (data=0x168759d0) at chan_iax2.c:11021
#3  0x00000000005191a7 in dummy_start (data=0x1686a9c0) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 11 (process 23937):
#0  0x000000307600ad09 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00002aaab630a2b3 in ast_cond_wait (cond=0x16877d88, t=0x16877d60) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/lock.h:1751
#2  0x00002aaab633cfd1 in iax2_process_thread (data=0x16876ca0) at chan_iax2.c:11021
#3  0x00000000005191a7 in dummy_start (data=0x1686ca60) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 10 (process 23938):
#0  0x000000307600ad09 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00002aaab630a2b3 in ast_cond_wait (cond=0x16879058, t=0x16879030) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/lock.h:1751
#2  0x00002aaab633cfd1 in iax2_process_thread (data=0x16877f70) at chan_iax2.c:11021
#3  0x00000000005191a7 in dummy_start (data=0x1686d740) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 9 (process 23939):
#0  0x000000307600af70 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00002aaab633d395 in ast_cond_timedwait (cond=0x2aaab6562680, t=0x2aaab6560680, abstime=0x42195fe0) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/lock.h:1756
#2  0x00002aaab633f168 in sched_thread (ignore=0x0) at chan_iax2.c:11484
#3  0x00000000005191a7 in dummy_start (data=0x16879240) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 8 (process 23940):
#0  0x00000030758cae46 in poll () from /lib64/libc.so.6
#1  0x00000000004a1d05 in ast_io_wait (ioc=0x2aaaae190900, howlong=-1) at io.c:275
#2  0x00002aaab633f513 in network_thread (ignore=0x0) at chan_iax2.c:11552
#3  0x00000000005191a7 in dummy_start (data=0x16879400) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 7 (process 23941):
#0  0x000000307589a0b1 in nanosleep () from /lib64/libc.so.6
#1  0x00002aaab42c89b2 in lock_broker (unused=0x0) at func_lock.c:145
#2  0x00000000005191a7 in dummy_start (data=0x2aaaac321d90) at utils.c:968
#3  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#4  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 6 (process 23975):
#0  0x00000030758cae46 in poll () from /lib64/libc.so.6
#1  0x0000000000519517 in ast_wait_for_input (fd=18, ms=-1) at utils.c:1057
#2  0x00000000004b3245 in get_input (s=0x41a05e40, output=0x41a055c0 "") at manager.c:3076
#3  0x00000000004b3418 in do_message (s=0x41a05e40) at manager.c:3114
#4  0x00000000004b3740 in session_do (data=0x167203e8) at manager.c:3177
#5  0x000000000050c222 in handle_tcptls_connection (data=0x167203e8) at tcptls.c:223
#6  0x00000000005191a7 in dummy_start (data=0x16720450) at utils.c:968
#7  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#8  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 5 (process 28136):
#0  0x00000030758cae46 in poll () from /lib64/libc.so.6
#1  0x0000000000434609 in netconsole (vconsole=0x7c7900) at asterisk.c:1026
#2  0x00000000005191a7 in dummy_start (data=0x1687c870) at utils.c:968
#3  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#4  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 4 (process 8198):
#0  0x000000307600ad09 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x000000000044132c in ast_cond_wait (cond=0x7bef60, t=0x7a0e10) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/lock.h:1751
#2  0x0000000000441067 in autoservice_run (ign=0x0) at autoservice.c:96
#3  0x00000000005191a7 in dummy_start (data=0x167d5270) at utils.c:968
#4  0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#5  0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 3 (process 22931):
#0  0x00000030758cae46 in poll () from /lib64/libc.so.6
#1  0x000000000045171d in ast_waitfor_nandfds (c=0x40471f00, n=2, fds=0x0, nfds=0, exception=0x0, outfd=0x0, ms=0x40471efc) at channel.c:2079
#2  0x0000000000451b71 in ast_waitfor_n (c=0x40471f00, n=2, ms=0x40471efc) at channel.c:2337
#3  0x000000000045ac0c in ast_generic_bridge (c0=0x16800e20, c1=0x2aaacc00ae60, config=0x40473520, fo=0x40472658, rc=0x40472650, bridge_end={tv_sec = 0, tv_usec = 0}) at channel.c:4784
#4  0x000000000045cde2 in ast_channel_bridge (c0=0x16800e20, c1=0x2aaacc00ae60, config=0x40473520, fo=0x40472658, rc=0x40472650) at channel.c:5199
#5  0x0000000000489708 in ast_bridge_call (chan=0x16800e20, peer=0x2aaacc00ae60, config=0x40473520) at features.c:2544
#6  0x00002aaac660a6e5 in dial_exec_full (chan=0x16800e20, data=0x40473b40, peerflags=0x40473a90, continue_exec=0x0) at app_dial.c:2052
#7  0x00002aaac660af1f in dial_exec (chan=0x16800e20, data=0x40473b40) at app_dial.c:2136
#8  0x00000000004b976c in pbx_exec (c=0x16800e20, app=0x2aaaac069650, data=0x40473b40) at pbx.c:960
#9  0x00002aaaaaaba72e in handle_exec (chan=0x16800e20, agi=0x40474a10, argc=3, argv=0x40473c90) at res_agi.c:1487
#10 0x00002aaaaaabccc5 in agi_handle_command (chan=0x16800e20, agi=0x40474a10, buf=0x40474150 "EXEC", dead=0) at res_agi.c:2595
#11 0x00002aaaaaabd528 in run_agi (chan=0x16800e20, request=0x40474e50 "assistant.agi", agi=0x40474a10, pid=22932, status=0x40474a04, dead=0, argc=2, argv=0x40474a38) at res_agi.c:2730
#12 0x00002aaaaaabe0de in agi_exec_full (chan=0x16800e20, data=0x404778e0, enhanced=0, dead=0) at res_agi.c:2964
#13 0x00002aaaaaabe23c in agi_exec (chan=0x16800e20, data=0x404778e0) at res_agi.c:2998
#14 0x00000000004b976c in pbx_exec (c=0x16800e20, app=0x2aaaac017e50, data=0x404778e0) at pbx.c:960
#15 0x00000000004c0f95 in pbx_extension_helper (c=0x16800e20, con=0x0, context=0x168011d8 "out", exten=0x16801228 "38051893", priority=1, label=0x0, callerid=0x1630a020 "90990672", action=E_SPAWN, found=0x40479fc4, combined_find_spawn=1) at pbx.c:3219
#16 0x00000000004c259c in ast_spawn_extension (c=0x16800e20, context=0x168011d8 "out", exten=0x16801228 "38051893", priority=1, callerid=0x1630a020 "90990672", found=0x40479fc4, combined_find_spawn=1) at pbx.c:3675
#17 0x00000000004c2cea in __ast_pbx_run (c=0x16800e20, args=0x0) at pbx.c:3764
#18 0x00000000004c4287 in pbx_thread (data=0x16800e20) at pbx.c:4051
#19 0x00000000005191a7 in dummy_start (data=0x16850100) at utils.c:968
#20 0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#21 0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 2 (process 22934):
#0  0x00000030758cae46 in poll () from /lib64/libc.so.6
#1  0x000000000045171d in ast_waitfor_nandfds (c=0x41a7bb00, n=2, fds=0x0, nfds=0, exception=0x0, outfd=0x0, ms=0x41a7bafc) at channel.c:2079
#2  0x0000000000451b71 in ast_waitfor_n (c=0x41a7bb00, n=2, ms=0x41a7bafc) at channel.c:2337
#3  0x000000000045ac0c in ast_generic_bridge (c0=0x167ef800, c1=0x16918740, config=0x41a7d130, fo=0x41a7c258, rc=0x41a7c250, bridge_end={tv_sec = 0, tv_usec = 0}) at channel.c:4784
#4  0x000000000045cde2 in ast_channel_bridge (c0=0x167ef800, c1=0x16918740, config=0x41a7d130, fo=0x41a7c258, rc=0x41a7c250) at channel.c:5199
#5  0x0000000000489708 in ast_bridge_call (chan=0x167ef800, peer=0x16918740, config=0x41a7d130) at features.c:2544
#6  0x00002aaac660a6e5 in dial_exec_full (chan=0x167ef800, data=0x41a7f8e0, peerflags=0x41a7d6a0, continue_exec=0x0) at app_dial.c:2052
#7  0x00002aaac660af1f in dial_exec (chan=0x167ef800, data=0x41a7f8e0) at app_dial.c:2136
#8  0x00000000004b976c in pbx_exec (c=0x167ef800, app=0x2aaaac069650, data=0x41a7f8e0) at pbx.c:960
#9  0x00000000004c0f95 in pbx_extension_helper (c=0x167ef800, con=0x0, context=0x167efbb8 "autodial", exten=0x167efc08 "3805189390990672", priority=3, label=0x0, callerid=0x16858ec0 "38051893", action=E_SPAWN, found=0x41a81fc4, combined_find_spawn=1) at pbx.c:3219
#10 0x00000000004c259c in ast_spawn_extension (c=0x167ef800, context=0x167efbb8 "autodial", exten=0x167efc08 "3805189390990672", priority=3, callerid=0x16858ec0 "38051893", found=0x41a81fc4, combined_find_spawn=1) at pbx.c:3675
#11 0x00000000004c2cea in __ast_pbx_run (c=0x167ef800, args=0x0) at pbx.c:3764
#12 0x00000000004c4287 in pbx_thread (data=0x167ef800) at pbx.c:4051
#13 0x00000000005191a7 in dummy_start (data=0x167ddc60) at utils.c:968
#14 0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#15 0x00000030758d3c2d in clone () from /lib64/libc.so.6

Thread 1 (process 22935):
#0  0x00002aaab2d20593 in local_ast_moh_start (chan=0x16811500, mclass=0xcd0e6060 <Address 0xcd0e6060 out of bounds>, interpclass=0x0) at /usr/src/updates/asterisk-1.6.1.11/asterisk-1.6.1.11/include/asterisk/strings.h:50
#1  0x000000000045da22 in ast_moh_start (chan=0x16811500, mclass=0xcd0e6060 <Address 0xcd0e6060 out of bounds>, interpclass=0x0) at channel.c:5467
#2  0x00002aaaba66074b in local_indicate (ast=0x16811500, condition=16, data=0xcd0e6060, datalen=0) at chan_local.c:417
#3  0x00000000004547c2 in ast_indicate_data (chan=0x16811500, _condition=16, data=0xcd0e6060, datalen=0) at channel.c:3098
#4  0x000000000045ae4d in ast_generic_bridge (c0=0x16811500, c1=0x168ff5f0, config=0x4177f130, fo=0x4177e258, rc=0x4177e250, bridge_end={tv_sec = 0, tv_usec = 0}) at channel.c:4821
#5  0x000000000045cde2 in ast_channel_bridge (c0=0x16811500, c1=0x168ff5f0, config=0x4177f130, fo=0x4177e258, rc=0x4177e250) at channel.c:5199
#6  0x0000000000489708 in ast_bridge_call (chan=0x16811500, peer=0x168ff5f0, config=0x4177f130) at features.c:2544
#7  0x00002aaac660a6e5 in dial_exec_full (chan=0x16811500, data=0x417818e0, peerflags=0x4177f6a0, continue_exec=0x0) at app_dial.c:2052
#8  0x00002aaac660af1f in dial_exec (chan=0x16811500, data=0x417818e0) at app_dial.c:2136
#9  0x00000000004b976c in pbx_exec (c=0x16811500, app=0x2aaaac069650, data=0x417818e0) at pbx.c:960
#10 0x00000000004c0f95 in pbx_extension_helper (c=0x16811500, con=0x0, context=0x168118b8 "pstn2", exten=0x16811908 "90990672", priority=2, label=0x0, callerid=0x16918460 "38051893", action=E_SPAWN, found=0x41783fc4, combined_find_spawn=1) at pbx.c:3219
#11 0x00000000004c259c in ast_spawn_extension (c=0x16811500, context=0x168118b8 "pstn2", exten=0x16811908 "90990672", priority=2, callerid=0x16918460 "38051893", found=0x41783fc4, combined_find_spawn=1) at pbx.c:3675
#12 0x00000000004c2cea in __ast_pbx_run (c=0x16811500, args=0x0) at pbx.c:3764
#13 0x00000000004c4287 in pbx_thread (data=0x16811500) at pbx.c:4051
#14 0x00000000005191a7 in dummy_start (data=0x169184c0) at utils.c:968
#15 0x0000003076006617 in start_thread () from /lib64/libpthread.so.0
#16 0x00000030758d3c2d in clone () from /lib64/libc.so.6