mmt/nvidia: create pointer fuzzer and use it to detect ioctl_create argument size