The IO-APIC address has variable bits determined by the PCI-to-ISA bridge, and the IO-APIC version should be read from the IO-APIC. (Note that there's still implicit rather than explicit agreement on the IO-APIC base address between qemu and the hypervisor.) Signed-off-by: Jan Beulich <jbeulich@suse.com>