chore(fuzzing): Add fcntl to the sandbox monitor whitelist

[venkkatesh-sekar]

Corresponding failure observed on the hourly pipeline

[berestovskyy]

Looks good, thanks!

[adambratschikaye]

I assume this is due to enabling the on-disk compilation cache, where the compiled Wasm artifact is passed via a file descriptor and Wasmtime executes some fcntl call to execute it?

[venkkatesh-sekar]

I assume this is due to enabling the on-disk compilation cache, where the compiled Wasm artifact is passed via a file descriptor and Wasmtime executes some fcntl call to execute it?

Most likely, but I don't see any references to fcntl in the deserialize_open_file trace. I will try to dump the metadata from the fd to confirm if that's the case.

Update: I could see multiple calls to deserialize_open_file when running the fuzzer but couldn't see any fcntl call pairs. Looks like it's coming from elsewhere and will debug outside of this PR.