Fix _IOC_MESSAGE ioctl

The transfer function broke as a result of some early refactoring. This
commit fixes it.