A change to the TCP handling of IP options has broken all use of CIPSO on the 3.18 and higher kernels. UDP and UDS are unaffected. I am working with Paul Moore and the networking groups to resolve this problem. It affects SELinux, but as they use CIPSO in only limited cases it does not have the impact that it does for Smack.