<?xml version='1.0' encoding='utf-8'?>
<!DOCTYPE register_page SYSTEM "registers.dtd">
<!-- Copyright (c) 2010-2026 Arm Limited or its affiliates. All rights reserved. -->
<!-- This document is Non-Confidential. This document may only be used and distributed in accordance with the terms of the agreement entered into by Arm and the party that Arm delivered this document to. -->
<!--The data contained in this document is preliminary and subject to change or correction following further review. -->
<?xml-stylesheet href="one_register.xsl" type="text/xsl" ?>







<register_page>
  <registers>
  
    <register execution_state="AArch64" is_register="False" is_internal="True" is_stub_entry="False">
      <reg_short_name>TLBIP RVAALE1OS, TLBIP RVAALE1OSNXS</reg_short_name>
        
        <reg_long_name>TLB Range Invalidate by VA, All ASID, Last Level, EL1, Outer Shareable</reg_long_name>



      
            <reg_condition otherwise="UNDEFINED">when FEAT_D128 is implemented and FEAT_AA64 is implemented</reg_condition>
      




          <reg_reset_value></reg_reset_value>

      <reg_mappings>
        




      </reg_mappings>

        <reg_purpose>
          
    
      <purpose_text>
        <para>Invalidates cached copies of translation table entries from TLBs that meet all the following requirements:</para>

      </purpose_text>
      <purpose_text>
        <list type="unordered">
<listitem><content>
<para>The entry is one of the following:</para>
<list type="unordered">
<listitem><content>
<para>A 128-bit stage 1 translation table entry, from the leaf level of the translation table walk, indicated by the TTL hint.</para>
</content>
</listitem><listitem><content>
<para>A 64-bit stage 1 translation table entry, from the leaf level of the translation table walk, if TTL is <binarynumber>0b00</binarynumber>.</para>
</content>
</listitem></list>
</content>
</listitem><listitem><content>
<para>The entry is within the address range determined by the formula [BaseADDR &lt;= VA &lt; BaseADDR + ((NUM +1)*2<sup>(5*SCALE +1)</sup> * Translation_Granule_Size)].</para>
</content>
</listitem><listitem><content>
<para>When EL2 is implemented and enabled in the current Security state:</para>
<list type="unordered">
<listitem><content>If the Effective value of <register_link state="AArch64" id="AArch64-hcr_el2.xml">HCR_EL2</register_link>.{E2H, TGE} is not {1, 1}, the entry would be used with the current VMID and would be required to translate any of the VAs in the specified address range using the EL1&amp;0 translation regime for the Security state.</content>
</listitem><listitem><content>If the Effective value of <register_link state="AArch64" id="AArch64-hcr_el2.xml">HCR_EL2</register_link>.{E2H, TGE} is {1, 1}, the entry would be required to translate any of the VAs in the specified address range using the EL2&amp;0 translation regime for the Security state.</content>
</listitem></list>
</content>
</listitem><listitem><content>
<para>When EL2 is not implemented or is disabled in the current Security state, the entry would be required to translate any of the VAs in the specified address range using the EL1&amp;0 translation regime for the Security state.</para>
</content>
</listitem></list>

      </purpose_text>
      <purpose_text>
        <para>The Security state is indicated by the value of 
<register_link state="AArch64" id="AArch64-scr_el3.xml">SCR_EL3</register_link>.NS if <xref linkend="#FEAT_RME">FEAT_RME</xref> is not implemented, or <register_link state="AArch64" id="AArch64-scr_el3.xml">SCR_EL3</register_link>.{NSE, NS} if <xref linkend="#FEAT_RME">FEAT_RME</xref> is implemented.</para>

      </purpose_text>
      <purpose_text>
        <para>The invalidation applies to all PEs in the same Outer Shareable shareability domain as the PE that executes this System instruction.</para>

      </purpose_text>
      <purpose_text>
        <note><para>When 
a TLB maintenance instruction is generated to the Secure EL1&amp;0 translation regime and is defined to pass a VMID argument, or would be defined to pass a VMID argument if <register_link state="AArch64" id="AArch64-scr_el3.xml">SCR_EL3</register_link>.EEL2==1, then:</para><list type="unordered"><listitem><content>A PE with <register_link state="AArch64" id="AArch64-scr_el3.xml">SCR_EL3</register_link>.EEL2==1 is not architecturally required to invalidate any entries in the Secure EL1&amp;0 translation of a PE in the same required shareability domain with <register_link state="AArch64" id="AArch64-scr_el3.xml">SCR_EL3</register_link>.EEL2==0.</content></listitem><listitem><content>A PE with <register_link state="AArch64" id="AArch64-scr_el3.xml">SCR_EL3</register_link>.EEL2==0 is not architecturally required to invalidate any entries in the Secure EL1&amp;0 translation of a PE in the same required shareability domain with <register_link state="AArch64" id="AArch64-scr_el3.xml">SCR_EL3</register_link>.EEL2==1.</content></listitem><listitem><content>A PE is architecturally required to invalidate all relevant entries in the Secure EL1&amp;0 translation of a System MMU in the same required shareability domain with a VMID of 0.</content></listitem></list></note>
      </purpose_text>
      <purpose_text>
        <note><para>For the EL1&amp;0 and EL2&amp;0 translation regimes, the invalidation applies to both global entries and non-global entries with any ASID.</para></note>
      </purpose_text>
      <purpose_text>
        <para>For 128-bit translation table entry, the range of addresses invalidated is <arm-defined-word>UNPREDICTABLE</arm-defined-word> when Block or Page size corresponding to TTL and TG, for the translation system is not aligned.</para>

      </purpose_text>
      <purpose_text>
        <para>If <xref linkend="#FEAT_XS">FEAT_XS</xref> is implemented, the nXS variant of this System instruction is defined.</para>

      </purpose_text>
      <purpose_text>
        <para>It is <arm-defined-word>IMPLEMENTATION SPECIFIC</arm-defined-word> whether the TLBI System instruction with the nXS qualifier invalidates TLB entries with the XS attribute set to 1.</para>

      </purpose_text>
      <purpose_text>
        <para>The TLBI System instruction without the nXS qualifier waits for all memory accesses using in-scope old translation information to complete before it is considered complete.</para>

      </purpose_text>
      <purpose_text>
        <para>The TLBI System instruction with the nXS qualifier is considered complete when the subset of these memory accesses with XS attribute set to 0 are complete.</para>
      </purpose_text>

        </reg_purpose>

      <reg_groups>
            <reg_group>TLB</reg_group>
      </reg_groups>
      
      
        
      <reg_attributes>
          
    
      <attributes_text>
        <para>TLBIP RVAALE1OS, TLBIP RVAALE1OSNXS is a 128-bit System instruction.</para>
      </attributes_text>

      </reg_attributes>
      <reg_fieldsets>
        






<fields id="fieldset_0" length="128">
  <text_before_fields/>
  <field id="fieldset_0-127_108" has_partial_fieldset="False" is_linked_to_partial_fieldset="False" is_access_restriction_possible="False" is_variable_length="False" is_constant_value="False" is_partial_field="False" is_conditional_field_name="False" rwtype="RES0">
    <field_msb>127</field_msb>
    <field_lsb>108</field_lsb>
    <rel_range>127:108</rel_range>
    <field_description order="before"/>
    <field_description order="before">
      <para>Reserved, <arm-defined-word>RES0</arm-defined-word>.</para>
    </field_description>
  </field>
  <field id="fieldset_0-107_64" has_partial_fieldset="False" is_linked_to_partial_fieldset="False" is_access_restriction_possible="False" is_variable_length="False" is_constant_value="False" is_partial_field="False" is_conditional_field_name="False">
    <field_name>BaseADDR[55:12]</field_name>
    <field_msb>107</field_msb>
    <field_lsb>64</field_lsb>
    <rel_range>107:64</rel_range>
    <field_description order="before">
      <para>The starting address for the range of the maintenance instructions. This field is BaseADDR[55:12] for all translation granules.</para>
    </field_description>
  </field>
  <field id="fieldset_0-63_48" has_partial_fieldset="False" is_linked_to_partial_fieldset="False" is_access_restriction_possible="False" is_variable_length="False" is_constant_value="False" is_partial_field="False" is_conditional_field_name="False" rwtype="RES0">
    <field_msb>63</field_msb>
    <field_lsb>48</field_lsb>
    <rel_range>63:48</rel_range>
    <field_description order="before"/>
    <field_description order="before">
      <para>Reserved, <arm-defined-word>RES0</arm-defined-word>.</para>
    </field_description>
  </field>
  <field id="fieldset_0-47_46" has_partial_fieldset="False" is_linked_to_partial_fieldset="False" is_access_restriction_possible="False" is_variable_length="False" is_constant_value="False" is_partial_field="False" is_conditional_field_name="False">
    <field_name>TG</field_name>
    <field_msb>47</field_msb>
    <field_lsb>46</field_lsb>
    <rel_range>47:46</rel_range>
    <field_description order="before">
      <para>Translation granule size.</para>
    </field_description>
    <field_description order="after">
      <para>The instruction takes a translation granule size for the translations that are being invalidated. If the translations used a different translation granule size than the one being specified, then the architecture does not require that the instruction invalidates any entries.</para>
    </field_description>
    <field_values impdef="False">
      <field_value_instance>
        <field_value>0b00</field_value>
        <field_value_description>
          <para>Reserved.</para>
        </field_value_description>
      </field_value_instance>
      <field_value_instance>
        <field_value>0b01</field_value>
        <field_value_description>
          <para>4K translation granule.</para>
        </field_value_description>
      </field_value_instance>
      <field_value_instance>
        <field_value>0b10</field_value>
        <field_value_description>
          <para>16K translation granule.</para>
        </field_value_description>
      </field_value_instance>
      <field_value_instance>
        <field_value>0b11</field_value>
        <field_value_description>
          <para>64K translation granule.</para>
        </field_value_description>
      </field_value_instance>
    </field_values>
  </field>
  <field id="fieldset_0-45_44" has_partial_fieldset="False" is_linked_to_partial_fieldset="False" is_access_restriction_possible="False" is_variable_length="False" is_constant_value="False" is_partial_field="False" is_conditional_field_name="False">
    <field_name>SCALE</field_name>
    <field_msb>45</field_msb>
    <field_lsb>44</field_lsb>
    <rel_range>45:44</rel_range>
    <field_description order="before">
      <para>The exponent element of the calculation that is used to produce the upper range.</para>
    </field_description>
  </field>
  <field id="fieldset_0-43_39" has_partial_fieldset="False" is_linked_to_partial_fieldset="False" is_access_restriction_possible="False" is_variable_length="False" is_constant_value="False" is_partial_field="False" is_conditional_field_name="False">
    <field_name>NUM</field_name>
    <field_msb>43</field_msb>
    <field_lsb>39</field_lsb>
    <rel_range>43:39</rel_range>
    <field_description order="before">
      <para>The base element of the calculation that is used to produce the upper range.</para>
    </field_description>
  </field>
  <field id="fieldset_0-38_37" has_partial_fieldset="False" is_linked_to_partial_fieldset="False" is_access_restriction_possible="False" is_variable_length="False" is_constant_value="False" is_partial_field="False" is_conditional_field_name="False">
    <field_name>TTL</field_name>
    <field_msb>38</field_msb>
    <field_lsb>37</field_lsb>
    <rel_range>38:37</rel_range>
    <field_description order="before"><para>TTL Level hint. The TTL hint is only guaranteed to invalidate:</para>
<list type="unordered">
<listitem><content>
<para>Non-leaf-level entries in the range up to but not including the level described by the TTL hint.</para>
</content>
</listitem><listitem><content>
<para>Leaf-level entries in the range that match the level described by the TTL hint.</para>
</content>
</listitem></list></field_description>
    <field_values impdef="False">
      <field_value_instance>
        <field_value>0b00</field_value>
        <field_value_description>
          <para>The entries in the range can be using any level for the translation table entries.</para>
        </field_value_description>
      </field_value_instance>
      <field_value_instance>
        <field_value>0b01</field_value>
        <field_value_description>
          <para>The TTL hint indicates level 1.</para>
        </field_value_description>
      </field_value_instance>
      <field_value_instance>
        <field_value>0b10</field_value>
        <field_value_description>
          <para>The TTL hint indicates level 2.</para>
        </field_value_description>
      </field_value_instance>
      <field_value_instance>
        <field_value>0b11</field_value>
        <field_value_description>
          <para>The TTL hint indicates level 3.</para>
        </field_value_description>
      </field_value_instance>
    </field_values>
  </field>
  <field id="fieldset_0-36_0" has_partial_fieldset="False" is_linked_to_partial_fieldset="False" is_access_restriction_possible="False" is_variable_length="False" is_constant_value="False" is_partial_field="False" is_conditional_field_name="False" rwtype="RES0">
    <field_msb>36</field_msb>
    <field_lsb>0</field_lsb>
    <rel_range>36:0</rel_range>
    <field_description order="before"/>
    <field_description order="before">
      <para>Reserved, <arm-defined-word>RES0</arm-defined-word>.</para>
    </field_description>
  </field>
  <text_after_fields/>
</fields>




<reg_fieldset length="128">
  <fieldat id="fieldset_0-127_108" msb="127" lsb="108"/>
  <fieldat id="fieldset_0-107_64" msb="107" lsb="64"/>
  <fieldat id="fieldset_0-63_48" msb="63" lsb="48"/>
  <fieldat id="fieldset_0-47_46" msb="47" lsb="46"/>
  <fieldat id="fieldset_0-45_44" msb="45" lsb="44"/>
  <fieldat id="fieldset_0-43_39" msb="43" lsb="39"/>
  <fieldat id="fieldset_0-38_37" msb="38" lsb="37"/>
  <fieldat id="fieldset_0-36_0" msb="36" lsb="0"/>
</reg_fieldset>


      </reg_fieldsets>

      <access_mechanisms>
          


  
    
      <access_permission_text>
        <para>This system instruction is an alias of the SYSP instruction.</para>

      </access_permission_text>
      <access_permission_text>
        <para>The following pseudocode describes traps which apply to the System instruction. For information about changes to the scope of the invalidation to the instruction under different conditions, see <instruction>AArch64_TLBIP_RVAA()</instruction> in the <xref linkend="#shared_pseudocode.aarch64">Pseudocode for AArch64 operation</xref>.</para>
      </access_permission_text>





    
        
        <access_mechanism accessor="TLBIP RVAALE1OS" type="SystemAccessor">
            <encoding>
            <access_instruction>TLBIP RVAALE1OS{, &lt;Xt&gt;, &lt;Xt2&gt;}</access_instruction>
                
                <enc n="op0" v="0b01"/>
                
                <enc n="op1" v="0b000"/>
                
                <enc n="CRn" v="0b1000"/>
                
                <enc n="CRm" v="0b0101"/>
                
                <enc n="op2" v="0b111"/>
            </encoding>
            <access_permission>
                <ps name="TLBIP" sections="1" secttype="access_permission">
                <pstext>
if !(IsFeatureImplemented(FEAT_D128) &amp;&amp; IsFeatureImplemented(FEAT_AA64)) then
    Undefined();
elsif PSTATE.EL == EL0 then
    Undefined();
elsif PSTATE.EL == EL1 then
    if EL2Enabled() &amp;&amp; (HCR_EL2().TTLB == '1' || HCR_EL2().TTLBOS == '1') then
        AArch64_SystemAccessTrap(EL2, 0x14);
    elsif EL2Enabled() &amp;&amp; IsFeatureImplemented(FEAT_FGT) &amp;&amp; (!HaveEL(EL3) || SCR_EL3().FGTEn == '1') &amp;&amp; HFGITR_EL2().TLBIRVAALE1OS == '1' then
        AArch64_SystemAccessTrap(EL2, 0x14);
    else
        AArch64_TLBIP_RVAA(SecurityStateAtEL(EL1), Regime_EL10, VMID(), Broadcast_OSH, TLBILevel_Last, TLBI_AllAttr, X{128}(t, t2));
    end;
elsif PSTATE.EL == EL2 then
    AArch64_TLBIP_RVAA(SecurityStateAtEL(EL1), Regime_EL10, VMID(), Broadcast_OSH, TLBILevel_Last, TLBI_AllAttr, X{128}(t, t2));
elsif PSTATE.EL == EL3 then
    if IsFeatureImplemented(FEAT_RME) &amp;&amp; !ValidSecurityStateAtEL(EL1) then
        return;
    else
        AArch64_TLBIP_RVAA(SecurityStateAtEL(EL1), Regime_EL10, VMID(), Broadcast_OSH, TLBILevel_Last, TLBI_AllAttr, X{128}(t, t2));
    end;
end;
                </pstext>
                </ps>
            </access_permission>
        </access_mechanism>
    
        
        <access_mechanism accessor="TLBIP RVAALE1OSNXS" type="SystemAccessor">
            <encoding>
            <access_instruction>TLBIP RVAALE1OSNXS{, &lt;Xt&gt;, &lt;Xt2&gt;}</access_instruction>
                
                <enc n="op0" v="0b01"/>
                
                <enc n="op1" v="0b000"/>
                
                <enc n="CRn" v="0b1001"/>
                
                <enc n="CRm" v="0b0101"/>
                
                <enc n="op2" v="0b111"/>
            </encoding>
            <access_permission>
                <ps name="TLBIP" sections="1" secttype="access_permission">
                <pstext>
if !(IsFeatureImplemented(FEAT_D128) &amp;&amp; IsFeatureImplemented(FEAT_AA64)) then
    Undefined();
elsif !IsFeatureImplemented(FEAT_XS) then
    Undefined();
elsif PSTATE.EL == EL0 then
    Undefined();
elsif PSTATE.EL == EL1 then
    if EL2Enabled() &amp;&amp; (HCR_EL2().TTLB == '1' || HCR_EL2().TTLBOS == '1') then
        AArch64_SystemAccessTrap(EL2, 0x14);
    elsif EL2Enabled() &amp;&amp; IsFeatureImplemented(FEAT_FGT) &amp;&amp; (!HaveEL(EL3) || SCR_EL3().FGTEn == '1') &amp;&amp; IsFeatureImplemented(FEAT_HCX) &amp;&amp; (!IsHCRXEL2Enabled() || HCRX_EL2().FGTnXS == '0') &amp;&amp; HFGITR_EL2().TLBIRVAALE1OS == '1' then
        AArch64_SystemAccessTrap(EL2, 0x14);
    else
        AArch64_TLBIP_RVAA(SecurityStateAtEL(EL1), Regime_EL10, VMID(), Broadcast_OSH, TLBILevel_Last, TLBI_ExcludeXS, X{128}(t, t2));
    end;
elsif PSTATE.EL == EL2 then
    AArch64_TLBIP_RVAA(SecurityStateAtEL(EL1), Regime_EL10, VMID(), Broadcast_OSH, TLBILevel_Last, TLBI_ExcludeXS, X{128}(t, t2));
elsif PSTATE.EL == EL3 then
    if IsFeatureImplemented(FEAT_RME) &amp;&amp; !ValidSecurityStateAtEL(EL1) then
        return;
    else
        AArch64_TLBIP_RVAA(SecurityStateAtEL(EL1), Regime_EL10, VMID(), Broadcast_OSH, TLBILevel_Last, TLBI_ExcludeXS, X{128}(t, t2));
    end;
end;
                </pstext>
                </ps>
            </access_permission>
        </access_mechanism>

      </access_mechanisms>

      <arch_variants>
      </arch_variants>
  </register>
</registers>
<timestamp>2026-03-26 20:27:25</timestamp>
<commit_id>2026-03_rel</commit_id>
</register_page>