When netlink-useflag is enabled, https://git.netfilter.org/iptables/tree/utils/nfnl_osf.c gets used, which is GPL-2+. Reproducible: Always