Hmmm
strace seems to give something:
# strace -p $(pgrep -f "/system/vendor/bin/qti")
... a few lines later ...
openat(AT_FDCWD, "/dev/rmnet_ctrl", O_RDWR) = -1 ENOENT (No such file or directory)
getuid() = 1001
writev(5, [{iov_base="\0\264-\271\0054h\217hr7", iov_len=11}, {iov_base="\6", iov_len=1}, {iov_base="QTI_SDM_INFO\0", iov_len=13}, {iov_base="[qti_rmnet_peripheral.c:758] qti"..., iov_len=117}], 4) = 142
getuid() = 1001
writev(6, [{iov_base="l\225\0\351\3\264-", iov_len=7}, {iov_base="\0\264-\271\0054h\217hr7", iov_len=11}, {iov_base="\6", iov_len=1}, {iov_base="QTI_SDM_INFO\0", iov_len=13}, {iov_base="[qti_rmnet_peripheral.c:758] qti"..., iov_len=117}], 5) = 149
nanosleep({tv_sec=1, tv_nsec=0}, 0x7feb611ed0) = 0
openat(AT_FDCWD, "/dev/rmnet_ctrl", O_RDWR) = -1 ENOENT (No such file or directory)
getuid() = 1001
writev(5, [{iov_base="\0\264-\272\0054h\305\221\48", iov_len=11}, {iov_base="\6", iov_len=1}, {iov_base="QTI_SDM_INFO\0", iov_len=13}, {iov_base="[qti_rmnet_peripheral.c:758] qti"..., iov_len=117}], 4) = 142
getuid() = 1001
writev(6, [{iov_base="l\225\0\351\3\264-", iov_len=7}, {iov_base="\0\264-\272\0054h\305\221\48", iov_len=11}, {iov_base="\6", iov_len=1}, {iov_base="QTI_SDM_INFO\0", iov_len=13}, {iov_base="[qti_rmnet_peripheral.c:758] qti"..., iov_len=117}], 5) = 149
nanosleep({tv_sec=1, tv_nsec=0}, 0x7feb611ed0) = 0
openat(AT_FDCWD, "/dev/rmnet_ctrl", O_RDWR) = -1 ENOENT (No such file or directory)
getuid() = 1001
writev(5, [{iov_base="\0\264-\273\0054h\316\2\2208", iov_len=11}, {iov_base="\6", iov_len=1}, {iov_base="QTI_SDM_INFO\0", iov_len=13}, {iov_base="[qti_rmnet_peripheral.c:758] qti"..., iov_len=117}], 4) = 142
getuid() = 1001
writev(6, [{iov_base="l\225\0\351\3\264-", iov_len=7}, {iov_base="\0\264-\273\0054h\316\2\2208", iov_len=11}, {iov_base="\6", iov_len=1}, {iov_base="QTI_SDM_INFO\0", iov_len=13}, {iov_base="[qti_rmnet_peripheral.c:758] qti"..., iov_len=117}], 5) = 149
nanosleep({tv_sec=1, tv_nsec=0}, 0x7feb611ed0) = 0
getuid() = 1001
writev(5, [{iov_base="\0\264-\274\0054h\324y\3558", iov_len=11}, {iov_base="\6", iov_len=1}, {iov_base="QTI_SDM_INFO\0", iov_len=13}, {iov_base="[qti_rmnet_peripheral.c:775] qti"..., iov_len=124}], 4) = 149
getuid() = 1001
writev(6, [{iov_base="l\234\0\351\3\264-", iov_len=7}, {iov_base="\0\264-\274\0054h\324y\3558", iov_len=11}, {iov_base="\6", iov_len=1}, {iov_base="QTI_SDM_INFO\0", iov_len=13}, {iov_base="[qti_rmnet_peripheral.c:775] qti"..., iov_len=124}], 5) = 156
getuid() = 1001
writev(5, [{iov_base="\0\264-\274\0054h\316\232\2079", iov_len=11}, {iov_base="\6", iov_len=1}, {iov_base="QTI_SDM_INFO\0", iov_len=13}, {iov_base="[qti_rmnet_peripheral.c:832] qti"..., iov_len=125}], 4) = 150
getuid() = 1001
writev(6, [{iov_base="l\235\0\351\3\264-", iov_len=7}, {iov_base="\0\264-\274\0054h\316\232\2079", iov_len=11}, {iov_base="\6", iov_len=1}, {iov_base="QTI_SDM_INFO\0", iov_len=13}, {iov_base="[qti_rmnet_peripheral.c:832] qti"..., iov_len=125}], 5) = 157
getuid() = 1001
writev(5, [{iov_base="\0\264-\274\0054h\2\t\3609", iov_len=11}, {iov_base="\6", iov_len=1}, {iov_base="QTI_SDM_INFO\0", iov_len=13}, {iov_base="[qti_main.c:720] main():Failed t"..., iov_len=70}], 4) = 95
getuid() = 1001
writev(6, [{iov_base="lf\0\351\3\264-", iov_len=7}, {iov_base="\0\264-\274\0054h\2\t\3609", iov_len=11}, {iov_base="\6", iov_len=1}, {iov_base="QTI_SDM_INFO\0", iov_len=13}, {iov_base="[qti_main.c:720] main():Failed t"..., iov_len=70}], 5) = 102
mprotect(0x7fa8a56000, 4096, PROT_READ|PROT_WRITE) = 0
mprotect(0x7fa8a56000, 4096, PROT_READ) = 0
mprotect(0x7fa8a56000, 4096, PROT_READ|PROT_WRITE) = 0
mprotect(0x7fa8a56000, 4096, PROT_READ) = 0
mprotect(0x7fa8a56000, 4096, PROT_READ|PROT_WRITE) = 0
mprotect(0x7fa8a56000, 4096, PROT_READ) = 0
munmap(0x7fa8a56000, 4096) = 0
exit_group(-1) = ?
+++ exited with 255 +++
I think I read about a missing /dev/rmnet_ctrl somewhere causing issues