In my case this turned out to be a case of cgroup on top of cgroup2. Our workload manager seems to mount the freezer cgroup:
$ grep cgroup /proc/mounts cgroup2 /sys/fs/cgroup cgroup2 rw,nosuid,nodev,noexec,relatime 0 0 cgroup /sys/fs/cgroup/freezer cgroup rw,nosuid,nodev,noexec,relatime,freezer 0 0
If I unmount /sys/fs/cgroup/freezer I can start my containers again.
In my case this turned out to be a case of cgroup on top of cgroup2. Our workload manager seems to mount the freezer cgroup:
$ grep cgroup /proc/mounts nodev,noexec, relatime 0 0 cgroup/ freezer cgroup rw,nosuid, nodev,noexec, relatime, freezer 0 0
cgroup2 /sys/fs/cgroup cgroup2 rw,nosuid,
cgroup /sys/fs/
If I unmount /sys/fs/ cgroup/ freezer I can start my containers again.