IPv6: Can't ping anything - "Operation not permitted"
Easy answer: somehow ip6tables had been configured to reject all packets, so reconfiguring back to ACCEPT solved the problem:
ip6tables -P INPUT ACCEPT
ip6tables -P OUTPUT ACCEPT
ip6tables -P FORWARD ACCEPT