1 :INPUT,OUTPUT,POSTROUTING 2 *mangle 3 -m cgroup --cgroup 1;=;OK 4 -m cgroup ! --cgroup 1;=;OK 5 -m cgroup --path "/";=;OK 6 -m cgroup ! --path "/";=;OK 7 -m cgroup --cgroup 1 --path "/";;FAIL 8 -m cgroup ;;FAIL 9