Yes ping works as root and the ping_group kernel setting is restrictive so I think that’s the root cause…
Thanks