generated rules seems like this:
38 D chain=forward action=change-mss new-mss=1440 tcp-flags=syn protocol=tcp
in-interface=
39 D chain=forward action=change-mss new-mss=1448 tcp-flags=syn protocol=tcp
out-interface=
but not doing anything ...
after downgrade to 3.28 everything again OK