Wireguard module not loaded

[nikstar]

Hi, everyone. I want to install Wireguard client to route all traffic through VPN. I've installed packages, set up connection through web ui, but nothing is happening. Wireguard status page is empty and network interface is not connected.

From what I understand, wireguard kernel module is not being loaded:

root@OpenWrt:~# wg show
root@OpenWrt:~# lsmod | grep wireguard
root@OpenWrt:~# modprobe wireguard
1 module could not be probed
- wireguard

Log shows some errors:

daemon.err modprobe: 1 module could not be probed
daemon.err modprobe: - wireguard
daemon.notice netifd: wg0 (32404): RTNETLINK answers: Not supported
kern.warn kernel: [41283.517132] wireguard: Unknown symbol udp_sock_create4 (err -2)
kern.warn kernel: [41283.523143] wireguard: Unknown symbol dst_cache_set_ip4 (err 0)
kern.warn kernel: [41283.529069] wireguard: Unknown symbol udp_tunnel6_xmit_skb (err -2)
kern.warn kernel: [41283.535490] wireguard: Unknown symbol dst_cache_destroy (err 0)
kern.warn kernel: [41283.541472] wireguard: Unknown symbol dst_cache_init (err 0)
kern.warn kernel: [41283.547331] wireguard: Unknown symbol udp_tunnel_sock_release (err -2)
kern.warn kernel: [41283.554038] wireguard: Unknown symbol setup_udp_tunnel_sock (err -2)
kern.warn kernel: [41283.560400] wireguard: Unknown symbol udp_sock_create6 (err -2)
kern.warn kernel: [41283.566496] wireguard: Unknown symbol dst_cache_get_ip6 (err 0)
kern.warn kernel: [41283.572503] wireguard: Unknown symbol dst_cache_get_ip4 (err 0)
kern.warn kernel: [41283.578452] wireguard: Unknown symbol dst_cache_set_ip6 (err 0)
kern.warn kernel: [41283.584480] wireguard: Unknown symbol udp_tunnel_xmit_skb (err -2)

Not sure where to go from here. Please help!

I use OpenWrt 19.07.4 on Xiaomi Router 4. I'm new to OpenWrt so if there is some more info I can provide please tell.

System version info

root@OpenWrt:~# uname -r
4.14.195
root@OpenWrt:~# opkg list-installed | grep wireguard
kmod-wireguard - 4.14.195+1.0.20200611-1
luci-app-wireguard - git-20.341.57626-51f55b5-1
luci-i18n-wireguard-en - git-20.341.57626-51f55b5-1
luci-proto-wireguard - git-20.341.57626-51f55b5-1
wireguard - 1.0.20200611-1
wireguard-tools - 1.0.20191226-1

[frollic]

Have you installed all the dependencies for kmod-wireguard ?

[vgaetera]

https://openwrt.org/docs/guide-user/services/vpn/wireguard/start#restarting_services

Navigate to LuCI → System → Startup → Initscripts and click to network → Restart.

[nikstar]

@frollic

Have you installed all the dependencies for kmod-wireguard ?

Yes. I've tried reinstalling with opkg and manually checked that dependencies kmod-udptunnel6, kmod-udptunnel4 are loaded.

@vgaetera

https://openwrt.org/docs/guide-user/services/vpn/wireguard/start#restarting_services

Navigate to LuCI → System → Startup → Initscripts and click to network → Restart.

No change. logread shows more of the same. It tries loading wireguard every 5 seconds or so and fails.

[vgaetera]

modprobe udp_tunnel
modprobe ip6_udp_tunnel
modprobe wireguard

What is the output?

[nikstar]

root@OpenWrt:~# modprobe udp_tunnel
udp_tunnel is already loaded
root@OpenWrt:~# modprobe ip6_udp_tunnel
ip6_udp_tunnel is already loaded
root@OpenWrt:~# modprobe wireguard
1 module could not be probed
- wireguard

[frollic]

@nikstar

daemon.notice netifd: wg0 (32404): RTNETLINK answers: Not supported

Might actually be something you should look into ...

[Solved] Internet redudancy with two routers and two connections

I configured my switch for vlan1. Then I created a lan0.1 on TO and added it to the lan bridge but I lost connectivity to the lan. Even if i create a new interface with lan0.1 (bridged or not) I can't connect to lan devices. Any idea how to proceed?

Summary

bridge v a dev br-lan self vid 1 untagged pvid RTNETLINK answers: Not supported root@Turris:~# lsmod | grep 802 root@Turris:~# root@Turris:~# ubus -S call system board {"kernel":"4.14.95","hostname":"Tur…

[vgaetera]

opkg update
opkg --force-reinstall install \
    kmod-udptunnel4 kmod-udptunnel6 kmod-wireguard libmnl0 ip \
    wireguard wireguard-tools luci-proto-wireguard luci-app-wireguard

[nikstar]

@frollic

Might actually be something you should look into ...

Thank you. I'll try building the image myself and see if it works.

Fixes for module not loading on Ubuntu were a) upgrading kernel, or b) installing linux-headers-$(uname -r). But looks like this package does not exist for OpenWrt.

@vgaetera

opkg update
opkg --force-reinstall install \
    kmod-udptunnel4 kmod-udptunnel6 kmod-wireguard libmnl0 ip \
    wireguard wireguard-tools luci-proto-wireguard luci-app-wireguard

Thanks. I tried it and it didn't work. I even re-flashed sysupgrade image. I'll build the system image myself next.

[frollic]

Yeah, Linux-headers is usually for compiling from source, which wouldn't be anything you'd do on the router.

[nikstar]

Update: I built an image with wireguard enabled in menuconfig. This worked perfectly, and now I have the setup I want.

For the record, I don't know what caused the original problem. Wireguard kernel module didn't see symbols declared in udp_tunnel and ip6_udp_tunnel. I found this email from original creator of wireguard module, who had the same issue in 2016.

Thank you for your help, @frollic and @vgaetera