--- linux-4.9.37/net/ipv6/calipso.c	2017-07-12 16:42:41.000000000 +0300
+++ linux-4.9.y/net/ipv6/calipso.c	2021-06-07 13:01:34.000000000 +0300
@@ -1062,7 +1062,8 @@
 			goto getattr_return;
 		}
 
-		secattr->flags |= NETLBL_SECATTR_MLS_CAT;
+		if (secattr->attr.mls.cat)
+			secattr->flags |= NETLBL_SECATTR_MLS_CAT;
 	}
 
 	secattr->type = NETLBL_NLTYPE_CALIPSO;