1:INPUT,OUTPUT,POSTROUTING 2*mangle 3-m cgroup --cgroup 1;=;OK 4-m cgroup ! --cgroup 1;=;OK 5-m cgroup --path "/";=;OK 6-m cgroup ! --path "/";=;OK 7-m cgroup --cgroup 1 --path "/";;FAIL 8-m cgroup ;;FAIL 9