(gdb) bt #0 0x00007ffb14fcb3bd in moh_release (chan=0x0, data=0x3167820) at res_musiconhold.c:948 #1 0x00007ffb14fcb788 in moh_alloc (chan=0x317b128, params=0x3168b38) at res_musiconhold.c:1002 #2 0x000000000047c005 in ast_activate_generator (chan=0x317b128, gen=0x7ffb151d1840, params=0x3168b38) at channel.c:3128 #3 0x00007ffb14fcdaee in local_ast_moh_start (chan=0x317b128, mclass=0x7ffb13c35db8 "0", interpclass=0x0) at res_musiconhold.c:1582 #4 0x000000000048ddfe in ast_moh_start (chan=0x317b128, mclass=0x7ffb13c35db8 "0", interpclass=0x0) at channel.c:8421 #5 0x00007ffb17644e46 in queue_exec (chan=0x317b128, data=0x7ffb13c3774b "2013479-c19027233ba9969f9de9fe7b5f96ed2c") at app_queue.c:7069 #6 0x000000000052536f in pbx_exec (c=0x317b128, app=0x3069f40, data=0x7ffb13c3774b "2013479-c19027233ba9969f9de9fe7b5f96ed2c") at pbx.c:1589 #7 0x00007ffb19b20126 in handle_exec (chan=0x317b128, agi=0x7ffb13c38030, argc=3, argv=0x7ffb13c37290) at res_agi.c:2561 #8 0x00007ffb19b229f7 in agi_handle_command (chan=0x317b128, agi=0x7ffb13c38030, buf=0x7ffb13c37740 "EXEC", dead=0) at res_agi.c:3458 #9 0x00007ffb19b2343f in run_agi (chan=0x317b128, request=0x7ffb13c37fd0 "agi://localhost/dialplan_inbound", agi=0x7ffb13c38030, pid=-1, status=0x7ffb13c38024, dead=0, argc=1, argv=0x7ffb13c38058) at res_agi.c:3656 #10 0x00007ffb19b24723 in agi_exec_full (chan=0x317b128, data=0x7ffb13c3a670 "agi://localhost/dialplan_inbound", enhanced=0, dead=0) at res_agi.c:3941 #11 0x00007ffb19b24861 in agi_exec (chan=0x317b128, data=0x7ffb13c3a670 "agi://localhost/dialplan_inbound") at res_agi.c:3975 #12 0x000000000052536f in pbx_exec (c=0x317b128, app=0x2b1eff0, data=0x7ffb13c3a670 "agi://localhost/dialplan_inbound") at pbx.c:1589 #13 0x000000000052f0f6 in pbx_extension_helper (c=0x317b128, con=0x0, context=0x317bf78 "default", exten=0x317bfc8 "2013479", priority=24, label=0x0, callerid=0x0, action=E_SPAWN, found=0x7ffb13c3ccf4, combined_find_spawn=1) at pbx.c:4665 #14 0x000000000053224d in ast_spawn_extension (c=0x317b128, context=0x317bf78 "default", exten=0x317bfc8 "2013479", priority=24, callerid=0x0, found=0x7ffb13c3ccf4, combined_find_spawn=1) at pbx.c:5781 #15 0x00000000005338d8 in __ast_pbx_run (c=0x317b128, args=0x0) at pbx.c:6256 #16 0x00000000005351e3 in pbx_thread (data=0x317b128) at pbx.c:6586 #17 0x000000000058de4c in dummy_start (data=0x30c1fa0) at utils.c:1162 #18 0x00007ffb1b5b8b50 in start_thread () from /lib/x86_64-linux-gnu/libpthread.so.0 #19 0x00007ffb1c39aa7d in clone () from /lib/x86_64-linux-gnu/libc.so.6 #20 0x0000000000000000 in ?? () (gdb) f 0 #0 0x00007ffb14fcb3bd in moh_release (chan=0x0, data=0x3167820) at res_musiconhold.c:948 948 AST_LIST_REMOVE(&moh->parent->members, moh, list); (gdb) p *moh $1 = {pipe = {56, 63}, origwfmt = {id = AST_FORMAT_ALAW, fattr = {format_attr = {0 }, rtp_marker_bit = 0 '\000'}}, parent = 0x3168b38, f = { frametype = AST_FRAME_VOICE, subclass = {integer = 100019, format = {id = AST_FORMAT_SLINEAR, fattr = {format_attr = {0 }, rtp_marker_bit = 0 '\000'}}}, datalen = 0, samples = 0, mallocd = 0, mallocd_hdr_len = 0, offset = 64, src = 0x0, data = {ptr = 0x0, uint32 = 0, pad = "\000\000\000\000\000\000\000"}, delivery = {tv_sec = 0, tv_usec = 0}, frame_list = {next = 0x0}, flags = 0, ts = 0, len = 0, seqno = 0}, list = {next = 0x0}} (gdb) p *moh.parent $2 = { name = "\320\364,\003", '\000' , "P\003\000\000\000\000\000\000\200\000\000\000\000\000\000\000u\000\000\000\000\000\000\000D\000bad magic number for object 0x3168b38.", dir = " Object is likely destroyed.\n\000\024\000\062\060\061\063-12-11 09:01:34\000\006\000ERROR\000\n\000astobj2.c\000\r\000INTERNAL_OBJ", '\000' , args = '\000' , announcement = '\000' , mode = '\000' "\221, \001\000\000\000\000\000\000\070`d\034\373\177\000\000\070`d\034\373\177\000\000\000\000\000\000\000\000\000", digit = 0 '\000', filearray = 0x0, allowed_files = 0, total_files = 0, flags = 0, format = {id = 0, fattr = {format_attr = {0 , 264, 0, 0, 2775626019, 0, 1, 0, 0, 0, 264, 0, 0, 2775626019, 0, 1, 0, 0, 0, 264, 0, 0, 2775626019, 0, 1, 0, 0, 0, 264, 0, 0, 2775626019, 0, 1, 0, 0, 0, 264, 0, 0, 2775626019, 0, 1, 0, 0, 0, 264, 0, 0, 2775626019, 0, 1}, rtp_marker_bit = 0 '\000'}}, pid = 0, start = 1133871366144, thread = 0, srcfd = -1519341277, timer = 0x1, realtime = 0, delete = 0, members = { first = 0x21, last = 0x33413f0}, list = {next = 0x31f3530}}