use syscallrecord struct in prctl sanitize