device_cgroup: add lockdep asserts