[backfire] dnsmasq: backport r29375