kernel: backport wireguard blake2s patch