I'd already read the booting process of xv6, but it does IPI in protected mode too. Maybe BSP will need to enter pmode to make any IPI call anyway.

Thanks for the help!