binder: Fix remapping of IO memory