Symptom
An IOSd crash occurs when configuring a control-plane packet capture and a DHCP offer packet is stuck in the control-plane of the switch.
The crash is preceded by memory allocation failures inside IOSd:
022379: .Jun 9 14:02:53.810: %SYS-2-MALLOCFAIL: Memory allocation of 2836 bytes failed from 0x800055C32EE2E1C2, alignment 8
Pool: Processor Free: 112180 Cause: Memory fragmentation
Alternate Pool: None Free: 0 Cause: No Alternate pool
-Process= "DHCP Snooping", ipl= 0, pid= 116
-Traceback= 1#b35800f3ce359ee4a26c7147c689a9ee :55C327F4D000+A936563 :55C327F4D000+A938026 :55C327F4D000+A93838F :55C327F4D000+C317716 :55C327F4D000+6EE11C2 :55C327F4D000+6EE1805 :55C327F4D000+6EDB72F :55C327F4D000+8242FB3 :55C327F4D000+34D740B :55C327F4D000+82409F9 :55C327F4D000+A936563 :55C327F4D000+A938026 :55C327F4D000+A93838F :55C327F4D000+C317716 :55C327F4D000+**MSG 00001 TRUNCATED**
**MSG 00001 CONTINUATION #01**6EE11C2 :55C327F4D000+6EE1805
(not enough memory to log snmp-ma trace)
%Log packet overrun, PC 0x55C33018DA2C, format:
%s
022380: .Jun 9 14:03:23.809: %SYS-2-MALLOCFAIL: Memory allocation of 2836 bytes failed from 0x800055C32EE2E1C2, alignment 8
Pool: Processor Free: 112180 Cause: Memory fragmentation
Alternate Pool: None Free: 0 Cause: No Alternate pool
-Process= "DHCP Snooping", ipl= 0, pid= 116
-Traceback= 1#b35800f3ce359ee4a26c7147c689a9ee :55C327F4D000+A936563 :55C327F4D000+A938026 :55C327F4D000+A93838F :55C327F4D000+C317716 :55C327F4D000+6EE11C2 :55C327F4D000+6EE1805 :55C327F4D000+6EDB72F :55C327F4D000+8242FB3 :55C327F4D000+34D740B :55C327F4D000+82409F9 :55C327F4D000+A936563 :55C327F4D000+A938026 :55C327F4D000+A93838F :55C327F4D000+C317716 :55C327F4D000+**MSG 00002 TRUNCATED**
**MSG 00002 CONTINUATION #01**6EE11C2 :55C327F4D000+6EE1805
(not enough memory to log snmp-ma trace)
Exception to IOS Thread:
Frame pointer 0x7FB5379A3B80, PC = 0x55C32CA955A8
UNIX-EXT-SIGNAL: Segmentation fault(11), Process = SAOpModelJob
Conditions
A DHCP packet was stuck in the switch and the following EPC was configured to capture it:
mon cap CPU control-plane both match any limit packets 10 start
Workaround
No workarounds at the moment.