use syscallrecord struct in fcntl sanitize