/dev/net/tun stopped working after Debian upgrade from buster to bullseye: Operation not permitted

Maybe triple check that /sys/fs/cgroup/devices indeed has the relevant entry.

I know that Debian has migrated to cgroup2 for their development version, maybe you got that change on your system somehow making lxc.cgroup meaningless?