Another app is currently holding the xtables lock.

[squidds]

Trying this script on Arch as an alternative to PiVPN. It works fine for my server config, but if I want to connect the server to mullvad and enable bother interfaces on boot, I get this error on my mullvad interface. If I disable wg0, my mullvad interface comes up just fine

`[email protected] - WireGuard via wg-quick(8) for mullvad/us241
Loaded: loaded (/usr/lib/systemd/system/[email protected]; enabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Sun 2021-08-15 19:23:10 EDT; 39s ago
Docs: man:wg-quick(8)
man:wg(8)
https://www.wireguard.com/
https://www.wireguard.com/quickstart/
https://git.zx2c4.com/wireguard-tools/about/src/man/wg-quick.8
https://git.zx2c4.com/wireguard-tools/about/src/man/wg.8
Process: 397 ExecStart=/usr/bin/wg-quick up mullvad-us241 (code=exited, status=4)
Main PID: 397 (code=exited, status=4)
CPU: 96ms

Aug 15 19:23:10 agbu wg-quick[397]: [#] ip -6 rule add table main suppress_prefixlength 0
Aug 15 19:23:10 agbu wg-quick[567]: [#] ip6tables-restore -n
Aug 15 19:23:10 agbu wg-quick[568]: Another app is currently holding the xtables lock. Perhaps you want to use the ->
Aug 15 19:23:10 agbu wg-quick[397]: [#] resolvconf -d mullvad-us241 -f
Aug 15 19:23:10 agbu wg-quick[397]: [#] ip -6 rule delete table 51820
Aug 15 19:23:10 agbu wg-quick[397]: [#] ip -6 rule delete table main suppress_prefixlength 0
Aug 15 19:23:10 agbu wg-quick[397]: [#] ip link delete dev mullvad-us241
Aug 15 19:23:10 agbu systemd[1]: [email protected]: Main process exited, code=exited, status=4/NOPERMIS>
Aug 15 19:23:10 agbu systemd[1]: [email protected]: Failed with result 'exit-code'.
Aug 15 19:23:10 agbu systemd[1]: Failed to start WireGuard via wg-quick(8) for mullvad/us241.
lines 1-23/23 (END)`

My Mullvad Config

`[Interface]
PrivateKey =
Address = 10.66.123.30/32,fc00:bbbb:bbbb:bb01::3:7b1d/128
DNS =

            # Creates a new entry in the NAT table | For all packets that traverse through the out-interface mul>
            PostUp = iptables --table nat --append POSTROUTING --out-interface mullvad-us241 --source 0.0.0.0/0 >
            
            # Add a default route via the gateway on wlan0 interface for a routing table pivpn | All packets aga>
            PostUp = ip route add default via 192.168.1.1 dev enp1s0 table pivpn

            # All packets with FwMark 51820 to be routed against table pivpn | This is an important step because>
            PostUp = ip rule add fwmark 51820 table pivpn

            # OPTIONAL : If you need any ports open only from the Mullvad interface but not on wlan0, open a ran>
            PostUp = iptables --table filter -A INPUT --in-interface mullvad-us241 -p udp --dport 2836 -j ACCEPT

            # This section is executed when the wireguard interface is shutting down

            # All PreDown steps are inverse of PostUp statements so as to logically close the temporary setup wh>

            PreDown = iptables --table nat -D POSTROUTING --out-interface mullvad-us241 --source 0.0.0.0/0 --des>
            PreDown = ip route delete default via 192.168.1.1 dev enp1s0 table pivpn
            PreDown = ip rule delete fwmark 51820 table pivpn
            PreDown = iptables --table filter -D INPUT --in-interface mullvad-us241 -p udp --dport 2836 -j ACCEPT

[Peer]
PublicKey =
Endpoint = :51820
AllowedIPs = 0.0.0.0/0, ::/0 `

I can provide any other info if needed.