use syscallrecord struct in child_random_syscalls