u64 *vncr_array;
 };
 
+/*
+ * This structure is instantiated on a per-CPU basis, and contains
+ * data that is:
+ *
+ * - tied to a single physical CPU, and
+ * - either have a lifetime that does not extend past vcpu_put()
+ * - or is an invariant for the lifetime of the system
+ *
+ * Use host_data_ptr(field) as a way to access a pointer to such a
+ * field.
+ */
 struct kvm_host_data {
        struct kvm_cpu_context host_ctxt;
 };
 
 DECLARE_KVM_HYP_PER_CPU(struct kvm_host_data, kvm_host_data);
 
+/*
+ * How we access per-CPU host data depends on the where we access it from,
+ * and the mode we're in:
+ *
+ * - VHE and nVHE hypervisor bits use their locally defined instance
+ *
+ * - the rest of the kernel use either the VHE or nVHE one, depending on
+ *   the mode we're running in.
+ *
+ *   Unless we're in protected mode, fully deprivileged, and the nVHE
+ *   per-CPU stuff is exclusively accessible to the protected EL2 code.
+ *   In this case, the EL1 code uses the *VHE* data as its private state
+ *   (which makes sense in a way as there shouldn't be any shared state
+ *   between the host and the hypervisor).
+ *
+ * Yes, this is all totally trivial. Shoot me now.
+ */
+#if defined(__KVM_NVHE_HYPERVISOR__) || defined(__KVM_VHE_HYPERVISOR__)
+#define host_data_ptr(f)       (&this_cpu_ptr(&kvm_host_data)->f)
+#else
+#define host_data_ptr(f)                                               \
+       (static_branch_unlikely(&kvm_protected_mode_initialized) ?      \
+        &this_cpu_ptr(&kvm_host_data)->f :                             \
+        &this_cpu_ptr_hyp_sym(kvm_host_data)->f)
+#endif
+
 static inline void kvm_init_host_cpu_context(struct kvm_cpu_context *cpu_ctxt)
 {
        /* The host's MPIDR is immutable, so let's set it up at boot time */
 
 
 static void cpu_hyp_init_context(void)
 {
-       kvm_init_host_cpu_context(&this_cpu_ptr_hyp_sym(kvm_host_data)->host_ctxt);
+       kvm_init_host_cpu_context(host_data_ptr(host_ctxt));
 
        if (!is_kernel_in_hyp_mode())
                cpu_init_hyp_mode();
 
        if (!vcpu_get_flag(vcpu, DEBUG_DIRTY))
                return;
 
-       host_ctxt = &this_cpu_ptr(&kvm_host_data)->host_ctxt;
+       host_ctxt = host_data_ptr(host_ctxt);
        guest_ctxt = &vcpu->arch.ctxt;
        host_dbg = &vcpu->arch.host_debug_state.regs;
        guest_dbg = kern_hyp_va(vcpu->arch.debug_ptr);
        if (!vcpu_get_flag(vcpu, DEBUG_DIRTY))
                return;
 
-       host_ctxt = &this_cpu_ptr(&kvm_host_data)->host_ctxt;
+       host_ctxt = host_data_ptr(host_ctxt);
        guest_ctxt = &vcpu->arch.ctxt;
        host_dbg = &vcpu->arch.host_debug_state.regs;
        guest_dbg = kern_hyp_va(vcpu->arch.debug_ptr);
 
 
 static inline void __activate_traps_hfgxtr(struct kvm_vcpu *vcpu)
 {
-       struct kvm_cpu_context *hctxt = &this_cpu_ptr(&kvm_host_data)->host_ctxt;
+       struct kvm_cpu_context *hctxt = host_data_ptr(host_ctxt);
        struct kvm *kvm = kern_hyp_va(vcpu->kvm);
 
        CHECK_FGT_MASKS(HFGRTR_EL2);
 
 static inline void __deactivate_traps_hfgxtr(struct kvm_vcpu *vcpu)
 {
-       struct kvm_cpu_context *hctxt = &this_cpu_ptr(&kvm_host_data)->host_ctxt;
+       struct kvm_cpu_context *hctxt = host_data_ptr(host_ctxt);
        struct kvm *kvm = kern_hyp_va(vcpu->kvm);
 
        if (!cpus_have_final_cap(ARM64_HAS_FGT))
 
                write_sysreg(0, pmselr_el0);
 
-               hctxt = &this_cpu_ptr(&kvm_host_data)->host_ctxt;
+               hctxt = host_data_ptr(host_ctxt);
                ctxt_sys_reg(hctxt, PMUSERENR_EL0) = read_sysreg(pmuserenr_el0);
                write_sysreg(ARMV8_PMU_USERENR_MASK, pmuserenr_el0);
                vcpu_set_flag(vcpu, PMUSERENR_ON_CPU);
        if (kvm_arm_support_pmu_v3()) {
                struct kvm_cpu_context *hctxt;
 
-               hctxt = &this_cpu_ptr(&kvm_host_data)->host_ctxt;
+               hctxt = host_data_ptr(host_ctxt);
                write_sysreg(ctxt_sys_reg(hctxt, PMUSERENR_EL0), pmuserenr_el0);
                vcpu_clear_flag(vcpu, PMUSERENR_ON_CPU);
        }
 
        struct psci_boot_args *boot_args;
        struct kvm_cpu_context *host_ctxt;
 
-       host_ctxt = &this_cpu_ptr(&kvm_host_data)->host_ctxt;
+       host_ctxt = host_data_ptr(host_ctxt);
 
        if (is_cpu_on)
                boot_args = this_cpu_ptr(&cpu_on_args);
 
 
 void __noreturn __pkvm_init_finalise(void)
 {
-       struct kvm_host_data *host_data = this_cpu_ptr(&kvm_host_data);
-       struct kvm_cpu_context *host_ctxt = &host_data->host_ctxt;
+       struct kvm_cpu_context *host_ctxt = host_data_ptr(host_ctxt);
        unsigned long nr_pages, reserved_pages, pfn;
        int ret;
 
 
                pmr_sync();
        }
 
-       host_ctxt = &this_cpu_ptr(&kvm_host_data)->host_ctxt;
+       host_ctxt = host_data_ptr(host_ctxt);
        host_ctxt->__hyp_running_vcpu = vcpu;
        guest_ctxt = &vcpu->arch.ctxt;
 
        struct kvm_cpu_context *host_ctxt;
        struct kvm_vcpu *vcpu;
 
-       host_ctxt = &this_cpu_ptr(&kvm_host_data)->host_ctxt;
+       host_ctxt = host_data_ptr(host_ctxt);
        vcpu = host_ctxt->__hyp_running_vcpu;
 
        if (vcpu) {
 
        struct kvm_cpu_context *guest_ctxt;
        u64 exit_code;
 
-       host_ctxt = &this_cpu_ptr(&kvm_host_data)->host_ctxt;
+       host_ctxt = host_data_ptr(host_ctxt);
        host_ctxt->__hyp_running_vcpu = vcpu;
        guest_ctxt = &vcpu->arch.ctxt;
 
        struct kvm_cpu_context *host_ctxt;
        struct kvm_vcpu *vcpu;
 
-       host_ctxt = &this_cpu_ptr(&kvm_host_data)->host_ctxt;
+       host_ctxt = host_data_ptr(host_ctxt);
        vcpu = host_ctxt->__hyp_running_vcpu;
 
        __deactivate_traps(vcpu);
 
        struct kvm_cpu_context *guest_ctxt = &vcpu->arch.ctxt;
        struct kvm_cpu_context *host_ctxt;
 
-       host_ctxt = &this_cpu_ptr(&kvm_host_data)->host_ctxt;
+       host_ctxt = host_data_ptr(host_ctxt);
        __sysreg_save_user_state(host_ctxt);
 
        /*
        struct kvm_cpu_context *guest_ctxt = &vcpu->arch.ctxt;
        struct kvm_cpu_context *host_ctxt;
 
-       host_ctxt = &this_cpu_ptr(&kvm_host_data)->host_ctxt;
+       host_ctxt = host_data_ptr(host_ctxt);
 
        __sysreg_save_el1_state(guest_ctxt);
        __sysreg_save_user_state(guest_ctxt);
 
        if (!vcpu || !vcpu_get_flag(vcpu, PMUSERENR_ON_CPU))
                return false;
 
-       hctxt = &this_cpu_ptr(&kvm_host_data)->host_ctxt;
+       hctxt = host_data_ptr(host_ctxt);
        ctxt_sys_reg(hctxt, PMUSERENR_EL0) = val;
        return true;
 }