Iptables legacy

When I run a status check I get:

# tailscale status
# Health check:
#     - router: adding [-i tailscale0 -j MARK --set-mark 0x40000] in v4/filter/ts-forward: running [/usr/sbin/iptables -t filter -A ts-forward -i tailscale0 -j MARK --set-mark 0x40000 --wait]: exit status 2: iptables v1.8.4 (legacy): unknown option "--set-mark"

Do I need to upgrade iptables? What version added support for “–set-mark” (I can’t find it in their release notes)?