SocketException: Bind failure results in connectivity failure

[ignoramous]

use all networks was enabled.

12-18 18:25:33.553 23796 27915 D VpnLifecycle: protect: Base, 154, rinr? false  
12-18 18:25:33.554 23796 27920 D VpnLifecycle: process-firewall-request: ConnTrackerMetaData(uid=10255, sourceIP=10.111.222.1, sourcePort=33212, destIP=157.240.195.24, destPort=443, timestamp=1702904133552, isBlocked=false, blockedByRule=, proxyDetails=, blocklists=, protocol=6, query=edge-mqtt.facebook.com, connId=20186809873a8574, connType=None), false, false
12-18 18:25:33.554 23796 27915 E VpnLifecycle: Exception while binding(bind6) the socket for fid: 154, Binding socket to network 126 failed: EPERM (Operation not permitted), java.net.SocketException: Binding socket to network 126 failed: EPERM (Operation not permitted)
12-18 18:25:33.554 23796 27915 D VpnLifecycle: bind6: no network to bind, 1  

[ignoramous]

Tracing code from FwmarkServer, it seems like EPERM should only happen when the owner UID (ie, Rethink) doesn't have CHANGE_NETWORK_STATE permissions (which it does).