@bnys @minute seems like WireGuard is broken just like on 5.12. You need to enable this kernel options:
CONFIG_NETFILTER_XT_CONNMARK=y CONFIG_IP_NF_RAW=y CONFIG_IP6_NF_RAW=y