If on Linux and not running as root, use of any ping-like raw packet requires the CAP_NET_RAW capability (privilege). You can specify that in the SystemD service file (or override) with the AmbientCapabilities=CAP_NET_RAW setting. You can specify multiple capabilities with whitespace. I recommend AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_NET_RAW.