The attached setup file and single-packet pcap trace demonstrate a single-packet-of death in the ioam plugin. Missing sanity check: hop-by-hop header length must be less than the remaining buffer length. 

The fix is straightforward.