vow: fix clone filter broken by ca0f8279

exile.h

@@ -733,8 +733,8 @@ static int get_vow_argfilter(long syscall, uint64_t vow_promises, struct sock_fi
 	struct sock_filter clone_filter[] = {
 		/* It's the first argument for x86_64 */
 		EXILE_BPF_LOAD_SECCOMP_ARG(0),
-		EXILE_BPF_NO_MATCH_SET(CLONE_VM),
-		EXILE_BPF_NO_MATCH_SET(CLONE_THREAD),
+		EXILE_BPF_CMP_SET(CLONE_VM, 0, EXILE_SYSCALL_EXIT_BPF_NO_MATCH),
+		EXILE_BPF_CMP_SET(CLONE_THREAD, 0, EXILE_SYSCALL_EXIT_BPF_NO_MATCH),
 		EXILE_BPF_NO_MATCH_SET(CLONE_NEWCGROUP),
 		EXILE_BPF_NO_MATCH_SET(CLONE_NEWIPC),
 		EXILE_BPF_NO_MATCH_SET(CLONE_NEWNET),