IPIs are routed through the HTIF, which seems weird, but that makes it so cores can bring each other out of reset with IPIs.