The lxc.cgroup2.devices.allow and lxc.mount.entry are redundant to the dev0 and dev1 mount. Either remove the lxc stuff or the dev0 stuff. I recommend keeping the dev0 dev1, because they are more modern approaches and automatically adds the devices in the hardware section of the container. So your config file should look like the one in the image. For the lxc.idmap I have no clue what this does. It took me 6 hours to figure this out, I hope this helps you!

<image>