iopadmap inserted $__FABULOUS_* cells with no module, so their port directions were unknown to later passes. Read with -icells so the module names match the cell types.