afaik: If you’re using zone based firewall, wg0 interface needs to be member of a zone to make it pingable