diff --git a/virtio-devices/src/seccomp_filters.rs b/virtio-devices/src/seccomp_filters.rs
index c4896d5cf..2bdfebb37 100644
--- a/virtio-devices/src/seccomp_filters.rs
+++ b/virtio-devices/src/seccomp_filters.rs
@@ -270,6 +270,8 @@ fn virtio_thread_common() -> Vec<(i64, Vec<SeccompRule>)> {
         (libc::SYS_rt_sigreturn, vec![]),
         (libc::SYS_sigaltstack, vec![]),
         (libc::SYS_write, vec![]),
+        #[cfg(debug_assertions)]
+        (libc::SYS_fcntl, vec![]),
     ]
 }
 
diff --git a/vmm/src/seccomp_filters.rs b/vmm/src/seccomp_filters.rs
index b8feb81d0..4782960a4 100644
--- a/vmm/src/seccomp_filters.rs
+++ b/vmm/src/seccomp_filters.rs
@@ -488,6 +488,8 @@ fn signal_handler_thread_rules() -> Result<Vec<(i64, Vec<SeccompRule>)>, Backend
         (libc::SYS_sendto, vec![]),
         (libc::SYS_sigaltstack, vec![]),
         (libc::SYS_write, vec![]),
+        #[cfg(debug_assertions)]
+        (libc::SYS_fcntl, vec![]),
     ])
 }
 
@@ -520,6 +522,8 @@ fn pty_foreground_thread_rules() -> Result<Vec<(i64, Vec<SeccompRule>)>, Backend
         (libc::SYS_setsid, vec![]),
         (libc::SYS_sigaltstack, vec![]),
         (libc::SYS_write, vec![]),
+        #[cfg(debug_assertions)]
+        (libc::SYS_fcntl, vec![]),
     ])
 }
 
@@ -802,6 +806,8 @@ fn vcpu_thread_rules(
         (libc::SYS_unlinkat, vec![]),
         (libc::SYS_write, vec![]),
         (libc::SYS_writev, vec![]),
+        #[cfg(debug_assertions)]
+        (libc::SYS_fcntl, vec![]),
     ])
 }