introduce a state field to track syscall records

This will be useful later when dumping them in post-mortem situations