memcontrol: add vm_match_cgroup()