Recently we've faced with similar problem on 7.2(1)D1(1) on n7706 with f348-23 cards
The configuration "switchport trunk allowed vlan ..." was applied to vPC port-channel interface in "shutdown" state. After we made interface port-channel up we've seen traffic from all vlans, even from "not allowed" vlans.
