See #32429

Blocked on a few kernel patches, then we can add e2e tests to main CI for netkit. Plan is to add the coverage before the release hence self-assign and adding as 1.16.0 blocker.