clone3: fix cgroup argument sanity check