use syscallrecord struct in ioctl sanitize