fix Fatal() with format