You can trace log iptables and see first if the wireguard traffic is being blocked by some rule `iptables -t raw -I PREROUTING -p udp --dport 51820 -j TRACE` (

You can trace log iptables and see first if the wireguard traffic is being blocked by some rule `iptables -t raw -I PREROUTING -p udp --dport 51820 -j TRACE` (assuming default 51820 port) and look at dmesg or `journalctl -f` If that is not being blocked then you can look at `iptables -t raw -I PREROUTING -s <vps' wireguard ip> -j TRACE` and try pinging or reaching a service on your home network and look at dmesg again. Just don't forget to remove these rules again as they will continue to log. Beyond that, I'm not sure.