dm ioctl: forbid multiple device specifiers