WSL2 mirrored networking breaks runtimeExecPolicy="argv" with seccomp EBUSY

[Kermit]

Title: WSL2 mirrored networking breaks runtimeExecPolicy="argv" with seccomp EBUSY

I'm running Fence under WSL2. runtimeExecPolicy="argv" works correctly with WSL's default NAT networking, but fails when networkingMode=mirrored is enabled.

Error:

Error: failed to wrap command: command.runtimeExecPolicy="argv" requires Linux seccomp user notification support: device or resource busy

fence --linux-features reports:

Seccomp filter             syscall hardening             ok
Seccomp log action         violation diagnostics         ok
Seccomp user notification  runtimeExecPolicy: "argv"     unavailable  device or resource busy

Switching only the WSL networking mode reliably reproduces the issue.

Environment:

WSL:     2.7.11.0
Kernel:  6.18.33.2-2
Windows: 10.0.26200.8893

Is this a known limitation of Fence's argv exec filtering under WSL mirrored networking, or something Fence could work around?