ovl: don't allow writing ioctl on lower layer