Sounds you really are out of RAM. On Turris that typically happens through filled up /tmp, I think. Example report from today: Pakon/Surikata traffic whitelisting
(There might be more common ways to run out of RAM; I just don’t really know, you’ll most likely have to investigate a bit more.)