]> git.sesse.net Git - bcachefs-tools-debian/blobdiff - libbcachefs/fsck.c
Update bcachefs sources to 9b3aa5ec6c bcachefs: Add tabstops to printbufs
[bcachefs-tools-debian] / libbcachefs / fsck.c
index 7ea1a41ac637fa02a1160b10ee929280cd36d73f..ced4d671eb8d707e49b8600a5bfa607c4711751f 100644 (file)
@@ -9,6 +9,7 @@
 #include "fsck.h"
 #include "inode.h"
 #include "keylist.h"
+#include "subvolume.h"
 #include "super.h"
 #include "xattr.h"
 
 
 #define QSTR(n) { { { .len = strlen(n) } }, .name = n }
 
-static s64 bch2_count_inode_sectors(struct btree_trans *trans, u64 inum)
+static s64 bch2_count_inode_sectors(struct btree_trans *trans, u64 inum,
+                                   u32 snapshot)
 {
-       struct btree_iter *iter;
+       struct btree_iter iter;
        struct bkey_s_c k;
        u64 sectors = 0;
        int ret;
 
        for_each_btree_key(trans, iter, BTREE_ID_extents,
-                          POS(inum, 0), 0, k, ret) {
+                          SPOS(inum, 0, snapshot), 0, k, ret) {
                if (k.k->p.inode != inum)
                        break;
 
@@ -33,33 +35,138 @@ static s64 bch2_count_inode_sectors(struct btree_trans *trans, u64 inum)
                        sectors += k.k->size;
        }
 
-       bch2_trans_iter_free(trans, iter);
+       bch2_trans_iter_exit(trans, &iter);
 
        return ret ?: sectors;
 }
 
+static s64 bch2_count_subdirs(struct btree_trans *trans, u64 inum,
+                                   u32 snapshot)
+{
+       struct btree_iter iter;
+       struct bkey_s_c k;
+       struct bkey_s_c_dirent d;
+       u64 subdirs = 0;
+       int ret;
+
+       for_each_btree_key(trans, iter, BTREE_ID_dirents,
+                          SPOS(inum, 0, snapshot), 0, k, ret) {
+               if (k.k->p.inode != inum)
+                       break;
+
+               if (k.k->type != KEY_TYPE_dirent)
+                       continue;
+
+               d = bkey_s_c_to_dirent(k);
+               if (d.v->d_type == DT_DIR)
+                       subdirs++;
+       }
+
+       bch2_trans_iter_exit(trans, &iter);
+
+       return ret ?: subdirs;
+}
+
+static int __snapshot_lookup_subvol(struct btree_trans *trans, u32 snapshot,
+                                   u32 *subvol)
+{
+       struct btree_iter iter;
+       struct bkey_s_c k;
+       int ret;
+
+       bch2_trans_iter_init(trans, &iter, BTREE_ID_snapshots,
+                            POS(0, snapshot), 0);
+       k = bch2_btree_iter_peek_slot(&iter);
+       ret = bkey_err(k);
+       if (ret)
+               goto err;
+
+       if (k.k->type != KEY_TYPE_snapshot) {
+               bch_err(trans->c, "snapshot %u not fonud", snapshot);
+               ret = -ENOENT;
+               goto err;
+       }
+
+       *subvol = le32_to_cpu(bkey_s_c_to_snapshot(k).v->subvol);
+err:
+       bch2_trans_iter_exit(trans, &iter);
+       return ret;
+
+}
+
+static int __subvol_lookup(struct btree_trans *trans, u32 subvol,
+                          u32 *snapshot, u64 *inum)
+{
+       struct bch_subvolume s;
+       int ret;
+
+       ret = bch2_subvolume_get(trans, subvol, false, 0, &s);
+
+       *snapshot = le32_to_cpu(s.snapshot);
+       *inum = le64_to_cpu(s.inode);
+       return ret;
+}
+
+static int subvol_lookup(struct btree_trans *trans, u32 subvol,
+                        u32 *snapshot, u64 *inum)
+{
+       return lockrestart_do(trans, __subvol_lookup(trans, subvol, snapshot, inum));
+}
+
+static int lookup_first_inode(struct btree_trans *trans, u64 inode_nr,
+                             struct bch_inode_unpacked *inode)
+{
+       struct btree_iter iter;
+       struct bkey_s_c k;
+       int ret;
+
+       bch2_trans_iter_init(trans, &iter, BTREE_ID_inodes,
+                            POS(0, inode_nr),
+                            BTREE_ITER_ALL_SNAPSHOTS);
+       k = bch2_btree_iter_peek(&iter);
+       ret = bkey_err(k);
+       if (ret)
+               goto err;
+
+       if (!k.k || bkey_cmp(k.k->p, POS(0, inode_nr))) {
+               ret = -ENOENT;
+               goto err;
+       }
+
+       ret = bch2_inode_unpack(k, inode);
+err:
+       if (ret && ret != -EINTR)
+               bch_err(trans->c, "error %i fetching inode %llu",
+                       ret, inode_nr);
+       bch2_trans_iter_exit(trans, &iter);
+       return ret;
+}
+
 static int __lookup_inode(struct btree_trans *trans, u64 inode_nr,
                          struct bch_inode_unpacked *inode,
                          u32 *snapshot)
 {
-       struct btree_iter *iter;
+       struct btree_iter iter;
        struct bkey_s_c k;
        int ret;
 
-       iter = bch2_trans_get_iter(trans, BTREE_ID_inodes,
-                       POS(0, inode_nr), 0);
-       k = bch2_btree_iter_peek_slot(iter);
+       bch2_trans_iter_init(trans, &iter, BTREE_ID_inodes,
+                            SPOS(0, inode_nr, *snapshot), 0);
+       k = bch2_btree_iter_peek_slot(&iter);
        ret = bkey_err(k);
        if (ret)
                goto err;
 
-       if (snapshot)
-               *snapshot = iter->pos.snapshot;
-       ret = k.k->type == KEY_TYPE_inode
-               ? bch2_inode_unpack(bkey_s_c_to_inode(k), inode)
+       ret = bkey_is_inode(k.k)
+               ? bch2_inode_unpack(k, inode)
                : -ENOENT;
+       if (!ret)
+               *snapshot = iter.pos.snapshot;
 err:
-       bch2_trans_iter_free(trans, iter);
+       if (ret && ret != -EINTR)
+               bch_err(trans->c, "error %i fetching inode %llu:%u",
+                       ret, inode_nr, *snapshot);
+       bch2_trans_iter_exit(trans, &iter);
        return ret;
 }
 
@@ -70,17 +177,41 @@ static int lookup_inode(struct btree_trans *trans, u64 inode_nr,
        return lockrestart_do(trans, __lookup_inode(trans, inode_nr, inode, snapshot));
 }
 
+static int __lookup_dirent(struct btree_trans *trans,
+                          struct bch_hash_info hash_info,
+                          subvol_inum dir, struct qstr *name,
+                          u64 *target, unsigned *type)
+{
+       struct btree_iter iter;
+       struct bkey_s_c_dirent d;
+       int ret;
+
+       ret = bch2_hash_lookup(trans, &iter, bch2_dirent_hash_desc,
+                              &hash_info, dir, name, 0);
+       if (ret)
+               return ret;
+
+       d = bkey_s_c_to_dirent(bch2_btree_iter_peek_slot(&iter));
+       *target = le64_to_cpu(d.v->d_inum);
+       *type = d.v->d_type;
+       bch2_trans_iter_exit(trans, &iter);
+       return 0;
+}
+
 static int __write_inode(struct btree_trans *trans,
                         struct bch_inode_unpacked *inode,
                         u32 snapshot)
 {
-       struct btree_iter *inode_iter =
-               bch2_trans_get_iter(trans, BTREE_ID_inodes,
-                                   SPOS(0, inode->bi_inum, snapshot),
-                                   BTREE_ITER_INTENT);
-       int ret = bch2_btree_iter_traverse(inode_iter) ?:
-               bch2_inode_write(trans, inode_iter, inode);
-       bch2_trans_iter_put(trans, inode_iter);
+       struct btree_iter iter;
+       int ret;
+
+       bch2_trans_iter_init(trans, &iter, BTREE_ID_inodes,
+                           SPOS(0, inode->bi_inum, snapshot),
+                           BTREE_ITER_INTENT);
+
+       ret   = bch2_btree_iter_traverse(&iter) ?:
+               bch2_inode_write(trans, &iter, inode);
+       bch2_trans_iter_exit(trans, &iter);
        return ret;
 }
 
@@ -97,110 +228,176 @@ static int write_inode(struct btree_trans *trans,
        return ret;
 }
 
+static int fsck_inode_rm(struct btree_trans *trans, u64 inum, u32 snapshot)
+{
+       struct btree_iter iter = { NULL };
+       struct bkey_i_inode_generation delete;
+       struct bch_inode_unpacked inode_u;
+       struct bkey_s_c k;
+       int ret;
+
+       ret   = bch2_btree_delete_range_trans(trans, BTREE_ID_extents,
+                                             SPOS(inum, 0, snapshot),
+                                             SPOS(inum, U64_MAX, snapshot),
+                                             0, NULL) ?:
+               bch2_btree_delete_range_trans(trans, BTREE_ID_dirents,
+                                             SPOS(inum, 0, snapshot),
+                                             SPOS(inum, U64_MAX, snapshot),
+                                             0, NULL) ?:
+               bch2_btree_delete_range_trans(trans, BTREE_ID_xattrs,
+                                             SPOS(inum, 0, snapshot),
+                                             SPOS(inum, U64_MAX, snapshot),
+                                             0, NULL);
+       if (ret)
+               goto err;
+retry:
+       bch2_trans_begin(trans);
+
+       bch2_trans_iter_init(trans, &iter, BTREE_ID_inodes,
+                            SPOS(0, inum, snapshot), BTREE_ITER_INTENT);
+       k = bch2_btree_iter_peek_slot(&iter);
+
+       ret = bkey_err(k);
+       if (ret)
+               goto err;
+
+       if (!bkey_is_inode(k.k)) {
+               bch2_fs_inconsistent(trans->c,
+                                    "inode %llu:%u not found when deleting",
+                                    inum, snapshot);
+               ret = -EIO;
+               goto err;
+       }
+
+       bch2_inode_unpack(k, &inode_u);
+
+       /* Subvolume root? */
+       if (inode_u.bi_subvol) {
+               ret = bch2_subvolume_delete(trans, inode_u.bi_subvol);
+               if (ret)
+                       goto err;
+       }
+
+       bkey_inode_generation_init(&delete.k_i);
+       delete.k.p = iter.pos;
+       delete.v.bi_generation = cpu_to_le32(inode_u.bi_generation + 1);
+
+       ret   = bch2_trans_update(trans, &iter, &delete.k_i, 0) ?:
+               bch2_trans_commit(trans, NULL, NULL,
+                               BTREE_INSERT_NOFAIL);
+err:
+       bch2_trans_iter_exit(trans, &iter);
+       if (ret == -EINTR)
+               goto retry;
+
+       return ret;
+}
+
 static int __remove_dirent(struct btree_trans *trans, struct bpos pos)
 {
        struct bch_fs *c = trans->c;
-       struct btree_iter *iter;
+       struct btree_iter iter;
        struct bch_inode_unpacked dir_inode;
        struct bch_hash_info dir_hash_info;
        int ret;
 
-       ret = lookup_inode(trans, pos.inode, &dir_inode, NULL);
+       ret = lookup_first_inode(trans, pos.inode, &dir_inode);
        if (ret)
                return ret;
 
        dir_hash_info = bch2_hash_info_init(c, &dir_inode);
 
-       iter = bch2_trans_get_iter(trans, BTREE_ID_dirents, pos, BTREE_ITER_INTENT);
+       bch2_trans_iter_init(trans, &iter, BTREE_ID_dirents, pos, BTREE_ITER_INTENT);
 
        ret = bch2_hash_delete_at(trans, bch2_dirent_hash_desc,
-                                 &dir_hash_info, iter);
-       bch2_trans_iter_put(trans, iter);
-       return ret;
-}
-
-static int remove_dirent(struct btree_trans *trans, struct bpos pos)
-{
-       int ret = __bch2_trans_do(trans, NULL, NULL,
-                                 BTREE_INSERT_NOFAIL|
-                                 BTREE_INSERT_LAZY_RW,
-                                 __remove_dirent(trans, pos));
-       if (ret)
-               bch_err(trans->c, "remove_dirent: err %i deleting dirent", ret);
+                                 &dir_hash_info, &iter, 0);
+       bch2_trans_iter_exit(trans, &iter);
        return ret;
 }
 
 /* Get lost+found, create if it doesn't exist: */
-static int lookup_lostfound(struct btree_trans *trans,
+static int lookup_lostfound(struct btree_trans *trans, u32 subvol,
                            struct bch_inode_unpacked *lostfound)
 {
        struct bch_fs *c = trans->c;
        struct bch_inode_unpacked root;
        struct bch_hash_info root_hash_info;
        struct qstr lostfound_str = QSTR("lost+found");
-       u64 inum;
+       subvol_inum root_inum = { .subvol = subvol };
+       u64 inum = 0;
+       unsigned d_type = 0;
        u32 snapshot;
        int ret;
 
-       ret = lookup_inode(trans, BCACHEFS_ROOT_INO, &root, &snapshot);
-       if (ret && ret != -ENOENT)
+       ret = __subvol_lookup(trans, subvol, &snapshot, &root_inum.inum);
+       if (ret)
+               return ret;
+
+       ret = __lookup_inode(trans, root_inum.inum, &root, &snapshot);
+       if (ret)
                return ret;
 
        root_hash_info = bch2_hash_info_init(c, &root);
-       inum = bch2_dirent_lookup(c, BCACHEFS_ROOT_INO, &root_hash_info,
-                                 &lostfound_str);
-       if (!inum) {
+
+       ret = __lookup_dirent(trans, root_hash_info, root_inum,
+                           &lostfound_str, &inum, &d_type);
+       if (ret == -ENOENT) {
                bch_notice(c, "creating lost+found");
                goto create_lostfound;
        }
 
-       ret = lookup_inode(trans, inum, lostfound, &snapshot);
-       if (ret && ret != -ENOENT) {
-               /*
-                * The check_dirents pass has already run, dangling dirents
-                * shouldn't exist here:
-                */
+       if (ret && ret != -EINTR)
                bch_err(c, "error looking up lost+found: %i", ret);
+       if (ret)
                return ret;
-       }
 
-       if (ret == -ENOENT) {
-create_lostfound:
-               bch2_inode_init_early(c, lostfound);
-
-               ret = __bch2_trans_do(trans, NULL, NULL,
-                                     BTREE_INSERT_NOFAIL|
-                                     BTREE_INSERT_LAZY_RW,
-                       bch2_create_trans(trans,
-                                         BCACHEFS_ROOT_INO, &root,
-                                         lostfound,
-                                         &lostfound_str,
-                                         0, 0, S_IFDIR|0700, 0, NULL, NULL));
-               if (ret)
-                       bch_err(c, "error creating lost+found: %i", ret);
+       if (d_type != DT_DIR) {
+               bch_err(c, "error looking up lost+found: not a directory");
+               return ret;
        }
 
-       return 0;
+       /*
+        * The check_dirents pass has already run, dangling dirents
+        * shouldn't exist here:
+        */
+       return __lookup_inode(trans, inum, lostfound, &snapshot);
+
+create_lostfound:
+       bch2_inode_init_early(c, lostfound);
+
+       ret = bch2_create_trans(trans, root_inum, &root,
+                               lostfound, &lostfound_str,
+                               0, 0, S_IFDIR|0700, 0, NULL, NULL,
+                               (subvol_inum) { }, 0);
+       if (ret && ret != -EINTR)
+               bch_err(c, "error creating lost+found: %i", ret);
+       return ret;
 }
 
-static int reattach_inode(struct btree_trans *trans,
-                         struct bch_inode_unpacked *inode)
+static int __reattach_inode(struct btree_trans *trans,
+                         struct bch_inode_unpacked *inode,
+                         u32 inode_snapshot)
 {
        struct bch_hash_info dir_hash;
        struct bch_inode_unpacked lostfound;
        char name_buf[20];
        struct qstr name;
        u64 dir_offset = 0;
+       u32 subvol;
        int ret;
 
-       ret = lookup_lostfound(trans, &lostfound);
+       ret = __snapshot_lookup_subvol(trans, inode_snapshot, &subvol);
+       if (ret)
+               return ret;
+
+       ret = lookup_lostfound(trans, subvol, &lostfound);
        if (ret)
                return ret;
 
        if (S_ISDIR(inode->bi_mode)) {
                lostfound.bi_nlink++;
 
-               ret = write_inode(trans, &lostfound, U32_MAX);
+               ret = __write_inode(trans, &lostfound, U32_MAX);
                if (ret)
                        return ret;
        }
@@ -210,33 +407,51 @@ static int reattach_inode(struct btree_trans *trans,
        snprintf(name_buf, sizeof(name_buf), "%llu", inode->bi_inum);
        name = (struct qstr) QSTR(name_buf);
 
-       ret = __bch2_trans_do(trans, NULL, NULL, BTREE_INSERT_LAZY_RW,
-               bch2_dirent_create(trans, lostfound.bi_inum, &dir_hash,
-                                  mode_to_type(inode->bi_mode),
-                                  &name, inode->bi_inum, &dir_offset,
-                                  BCH_HASH_SET_MUST_CREATE));
+       ret = bch2_dirent_create(trans,
+                                (subvol_inum) {
+                                       .subvol = subvol,
+                                       .inum = lostfound.bi_inum,
+                                },
+                                &dir_hash,
+                                inode_d_type(inode),
+                                &name, inode->bi_inum, &dir_offset,
+                                BCH_HASH_SET_MUST_CREATE);
+       if (ret)
+               return ret;
+
+       inode->bi_dir           = lostfound.bi_inum;
+       inode->bi_dir_offset    = dir_offset;
+
+       return __write_inode(trans, inode, inode_snapshot);
+}
+
+static int reattach_inode(struct btree_trans *trans,
+                         struct bch_inode_unpacked *inode,
+                         u32 inode_snapshot)
+{
+       int ret = __bch2_trans_do(trans, NULL, NULL,
+                                 BTREE_INSERT_LAZY_RW|
+                                 BTREE_INSERT_NOFAIL,
+                       __reattach_inode(trans, inode, inode_snapshot));
        if (ret) {
                bch_err(trans->c, "error %i reattaching inode %llu",
                        ret, inode->bi_inum);
                return ret;
        }
 
-       inode->bi_dir           = lostfound.bi_inum;
-       inode->bi_dir_offset    = dir_offset;
-
-       return write_inode(trans, inode, U32_MAX);
+       return ret;
 }
 
 static int remove_backpointer(struct btree_trans *trans,
                              struct bch_inode_unpacked *inode)
 {
-       struct btree_iter *iter;
+       struct btree_iter iter;
        struct bkey_s_c k;
        int ret;
 
-       iter = bch2_trans_get_iter(trans, BTREE_ID_dirents,
-                                  POS(inode->bi_dir, inode->bi_dir_offset), 0);
-       k = bch2_btree_iter_peek_slot(iter);
+       bch2_trans_iter_init(trans, &iter, BTREE_ID_dirents,
+                            POS(inode->bi_dir, inode->bi_dir_offset), 0);
+       k = bch2_btree_iter_peek_slot(&iter);
        ret = bkey_err(k);
        if (ret)
                goto out;
@@ -245,139 +460,329 @@ static int remove_backpointer(struct btree_trans *trans,
                goto out;
        }
 
-       ret = remove_dirent(trans, k.k->p);
+       ret = __remove_dirent(trans, k.k->p);
 out:
-       bch2_trans_iter_put(trans, iter);
+       bch2_trans_iter_exit(trans, &iter);
        return ret;
 }
 
+static int snapshots_seen_update(struct bch_fs *c, struct snapshots_seen *s, struct bpos pos)
+{
+       pos.snapshot = snapshot_t(c, pos.snapshot)->equiv;
+
+       if (bkey_cmp(s->pos, pos))
+               s->nr = 0;
+       s->pos = pos;
+
+       /* Might get called multiple times due to lock restarts */
+       if (s->nr && s->d[s->nr - 1] == pos.snapshot)
+               return 0;
+
+       return snapshots_seen_add(c, s, pos.snapshot);
+}
+
+/**
+ * key_visible_in_snapshot - returns true if @id is a descendent of @ancestor,
+ * and @ancestor hasn't been overwritten in @seen
+ *
+ * That is, returns whether key in @ancestor snapshot is visible in @id snapshot
+ */
+static bool key_visible_in_snapshot(struct bch_fs *c, struct snapshots_seen *seen,
+                                   u32 id, u32 ancestor)
+{
+       ssize_t i;
+
+       BUG_ON(id > ancestor);
+
+       id              = snapshot_t(c, id)->equiv;
+       ancestor        = snapshot_t(c, ancestor)->equiv;
+
+       /* @ancestor should be the snapshot most recently added to @seen */
+       BUG_ON(!seen->nr || seen->d[seen->nr - 1] != ancestor);
+       BUG_ON(seen->pos.snapshot != ancestor);
+
+       if (id == ancestor)
+               return true;
+
+       if (!bch2_snapshot_is_ancestor(c, id, ancestor))
+               return false;
+
+       for (i = seen->nr - 2;
+            i >= 0 && seen->d[i] >= id;
+            --i)
+               if (bch2_snapshot_is_ancestor(c, id, seen->d[i]) &&
+                   bch2_snapshot_is_ancestor(c, seen->d[i], ancestor))
+                       return false;
+
+       return true;
+}
+
+/**
+ * ref_visible - given a key with snapshot id @src that points to a key with
+ * snapshot id @dst, test whether there is some snapshot in which @dst is
+ * visible.
+ *
+ * This assumes we're visiting @src keys in natural key order.
+ *
+ * @s  - list of snapshot IDs already seen at @src
+ * @src        - snapshot ID of src key
+ * @dst        - snapshot ID of dst key
+ */
+static int ref_visible(struct bch_fs *c, struct snapshots_seen *s,
+                      u32 src, u32 dst)
+{
+       return dst <= src
+               ? key_visible_in_snapshot(c, s, dst, src)
+               : bch2_snapshot_is_ancestor(c, src, dst);
+}
+
+#define for_each_visible_inode(_c, _s, _w, _snapshot, _i)      \
+       for (_i = (_w)->d; _i < (_w)->d + (_w)->nr && (_i)->snapshot <= (_snapshot); _i++)\
+               if (key_visible_in_snapshot(_c, _s, _i->snapshot, _snapshot))
+
 struct inode_walker {
-       bool                    first_this_inode;
-       bool                    have_inode;
-       u64                     cur_inum;
-       u32                     snapshot;
-       struct bch_inode_unpacked inode;
+       bool                            first_this_inode;
+       u64                             cur_inum;
+
+       size_t                          nr;
+       size_t                          size;
+       struct inode_walker_entry {
+               struct bch_inode_unpacked inode;
+               u32                     snapshot;
+               u64                     count;
+       } *d;
 };
 
-static struct inode_walker inode_walker_init(void)
+static void inode_walker_exit(struct inode_walker *w)
 {
-       return (struct inode_walker) {
-               .cur_inum       = -1,
-               .have_inode     = false,
-       };
+       kfree(w->d);
+       w->d = NULL;
 }
 
-static int walk_inode(struct btree_trans *trans,
-                     struct inode_walker *w, u64 inum)
+static struct inode_walker inode_walker_init(void)
 {
-       if (inum != w->cur_inum) {
-               int ret = lookup_inode(trans, inum, &w->inode, &w->snapshot);
+       return (struct inode_walker) { 0, };
+}
 
-               if (ret && ret != -ENOENT)
-                       return ret;
+static int inode_walker_realloc(struct bch_fs *c, struct inode_walker *w)
+{
+       if (w->nr == w->size) {
+               size_t new_size = max_t(size_t, 8UL, w->size * 2);
+               void *d = krealloc(w->d, new_size * sizeof(w->d[0]),
+                                  GFP_KERNEL);
+               if (!d) {
+                       bch_err(c, "fsck: error allocating memory for inode_walker, size %zu",
+                               new_size);
+                       return -ENOMEM;
+               }
 
-               w->have_inode   = !ret;
-               w->cur_inum     = inum;
-               w->first_this_inode = true;
-       } else {
-               w->first_this_inode = false;
+               w->d = d;
+               w->size = new_size;
        }
 
        return 0;
 }
 
-static int hash_redo_key(struct btree_trans *trans,
-                        const struct bch_hash_desc desc,
-                        struct bch_hash_info *hash_info,
-                        struct btree_iter *k_iter, struct bkey_s_c k)
+static int add_inode(struct bch_fs *c, struct inode_walker *w,
+                    struct bkey_s_c inode)
 {
-       struct bkey_i *delete;
-       struct bkey_i *tmp;
+       struct bch_inode_unpacked u;
+       int ret;
 
-       delete = bch2_trans_kmalloc(trans, sizeof(*delete));
-       if (IS_ERR(delete))
-               return PTR_ERR(delete);
+       ret = inode_walker_realloc(c, w);
+       if (ret)
+               return ret;
 
-       tmp = bch2_trans_kmalloc(trans, bkey_bytes(k.k));
-       if (IS_ERR(tmp))
-               return PTR_ERR(tmp);
+       BUG_ON(bch2_inode_unpack(inode, &u));
 
-       bkey_reassemble(tmp, k);
+       w->d[w->nr++] = (struct inode_walker_entry) {
+               .inode          = u,
+               .snapshot       = snapshot_t(c, inode.k->p.snapshot)->equiv,
+       };
 
-       bkey_init(&delete->k);
-       delete->k.p = k_iter->pos;
-       return  bch2_btree_iter_traverse(k_iter) ?:
-               bch2_trans_update(trans, k_iter, delete, 0) ?:
-               bch2_hash_set(trans, desc, hash_info, k_iter->pos.inode, tmp, 0);
+       return 0;
 }
 
-static int fsck_hash_delete_at(struct btree_trans *trans,
-                              const struct bch_hash_desc desc,
-                              struct bch_hash_info *info,
-                              struct btree_iter *iter)
+static int __walk_inode(struct btree_trans *trans,
+                       struct inode_walker *w, struct bpos pos)
 {
+       struct bch_fs *c = trans->c;
+       struct btree_iter iter;
+       struct bkey_s_c k;
+       unsigned i, ancestor_pos;
        int ret;
-retry:
-       ret   = bch2_hash_delete_at(trans, desc, info, iter) ?:
-               bch2_trans_commit(trans, NULL, NULL,
-                                 BTREE_INSERT_NOFAIL|
-                                 BTREE_INSERT_LAZY_RW);
-       if (ret == -EINTR) {
-               ret = bch2_btree_iter_traverse(iter);
-               if (!ret)
-                       goto retry;
+
+       pos.snapshot = snapshot_t(c, pos.snapshot)->equiv;
+
+       if (pos.inode == w->cur_inum) {
+               w->first_this_inode = false;
+               goto lookup_snapshot;
        }
 
-       return ret;
-}
+       w->nr = 0;
 
-static int hash_check_key(struct btree_trans *trans,
-                         const struct bch_hash_desc desc,
-                         struct bch_hash_info *hash_info,
-                         struct btree_iter *k_iter, struct bkey_s_c hash_k)
-{
-       struct bch_fs *c = trans->c;
-       struct btree_iter *iter = NULL;
-       char buf[200];
-       struct bkey_s_c k;
-       u64 hash;
-       int ret = 0;
+       for_each_btree_key(trans, iter, BTREE_ID_inodes, POS(0, pos.inode),
+                          BTREE_ITER_ALL_SNAPSHOTS, k, ret) {
+               if (k.k->p.offset != pos.inode)
+                       break;
 
-       if (hash_k.k->type != desc.key_type)
-               return 0;
+               if (bkey_is_inode(k.k))
+                       add_inode(c, w, k);
+       }
+       bch2_trans_iter_exit(trans, &iter);
 
-       hash = desc.hash_bkey(hash_info, hash_k);
+       if (ret)
+               return ret;
 
-       if (likely(hash == hash_k.k->p.offset))
-               return 0;
+       w->cur_inum             = pos.inode;
+       w->first_this_inode     = true;
+lookup_snapshot:
+       for (i = 0; i < w->nr; i++)
+               if (bch2_snapshot_is_ancestor(c, pos.snapshot, w->d[i].snapshot))
+                       goto found;
+       return INT_MAX;
+found:
+       BUG_ON(pos.snapshot > w->d[i].snapshot);
 
-       if (hash_k.k->p.offset < hash)
-               goto bad_hash;
+       if (pos.snapshot != w->d[i].snapshot) {
+               ancestor_pos = i;
 
-       for_each_btree_key(trans, iter, desc.btree_id, POS(hash_k.k->p.inode, hash),
-                          BTREE_ITER_SLOTS, k, ret) {
-               if (!bkey_cmp(k.k->p, hash_k.k->p))
-                       break;
+               while (i && w->d[i - 1].snapshot > pos.snapshot)
+                       --i;
+
+               ret = inode_walker_realloc(c, w);
+               if (ret)
+                       return ret;
+
+               array_insert_item(w->d, w->nr, i, w->d[ancestor_pos]);
+               w->d[i].snapshot = pos.snapshot;
+               w->d[i].count   = 0;
+       }
+
+       return i;
+}
+
+static int __get_visible_inodes(struct btree_trans *trans,
+                               struct inode_walker *w,
+                               struct snapshots_seen *s,
+                               u64 inum)
+{
+       struct bch_fs *c = trans->c;
+       struct btree_iter iter;
+       struct bkey_s_c k;
+       int ret;
+
+       w->nr = 0;
+
+       for_each_btree_key(trans, iter, BTREE_ID_inodes, POS(0, inum),
+                          BTREE_ITER_ALL_SNAPSHOTS, k, ret) {
+               if (k.k->p.offset != inum)
+                       break;
+
+               if (!bkey_is_inode(k.k))
+                       continue;
+
+               if (ref_visible(c, s, s->pos.snapshot, k.k->p.snapshot)) {
+                       add_inode(c, w, k);
+                       if (k.k->p.snapshot >= s->pos.snapshot)
+                               break;
+               }
+       }
+       bch2_trans_iter_exit(trans, &iter);
+
+       return ret;
+}
+
+static int check_key_has_snapshot(struct btree_trans *trans,
+                                 struct btree_iter *iter,
+                                 struct bkey_s_c k)
+{
+       struct bch_fs *c = trans->c;
+       char buf[200];
+       int ret = 0;
+
+       if (mustfix_fsck_err_on(!snapshot_t(c, k.k->p.snapshot)->equiv, c,
+                       "key in missing snapshot: %s",
+                       (bch2_bkey_val_to_text(&PBUF(buf), c, k), buf)))
+               return bch2_btree_delete_at(trans, iter,
+                                           BTREE_UPDATE_INTERNAL_SNAPSHOT_NODE) ?: 1;
+fsck_err:
+       return ret;
+}
+
+static int hash_redo_key(struct btree_trans *trans,
+                        const struct bch_hash_desc desc,
+                        struct bch_hash_info *hash_info,
+                        struct btree_iter *k_iter, struct bkey_s_c k)
+{
+       bch_err(trans->c, "hash_redo_key() not implemented yet");
+       return -EINVAL;
+#if 0
+       struct bkey_i *delete;
+       struct bkey_i *tmp;
+
+       delete = bch2_trans_kmalloc(trans, sizeof(*delete));
+       if (IS_ERR(delete))
+               return PTR_ERR(delete);
+
+       tmp = bch2_trans_kmalloc(trans, bkey_bytes(k.k));
+       if (IS_ERR(tmp))
+               return PTR_ERR(tmp);
+
+       bkey_reassemble(tmp, k);
+
+       bkey_init(&delete->k);
+       delete->k.p = k_iter->pos;
+       return  bch2_btree_iter_traverse(k_iter) ?:
+               bch2_trans_update(trans, k_iter, delete, 0) ?:
+               bch2_hash_set(trans, desc, hash_info, k_iter->pos.inode, tmp, 0);
+#endif
+}
+
+static int hash_check_key(struct btree_trans *trans,
+                         const struct bch_hash_desc desc,
+                         struct bch_hash_info *hash_info,
+                         struct btree_iter *k_iter, struct bkey_s_c hash_k)
+{
+       struct bch_fs *c = trans->c;
+       struct btree_iter iter = { NULL };
+       char buf[200];
+       struct bkey_s_c k;
+       u64 hash;
+       int ret = 0;
+
+       if (hash_k.k->type != desc.key_type)
+               return 0;
+
+       hash = desc.hash_bkey(hash_info, hash_k);
+
+       if (likely(hash == hash_k.k->p.offset))
+               return 0;
+
+       if (hash_k.k->p.offset < hash)
+               goto bad_hash;
+
+       for_each_btree_key(trans, iter, desc.btree_id, POS(hash_k.k->p.inode, hash),
+                          BTREE_ITER_SLOTS, k, ret) {
+               if (!bkey_cmp(k.k->p, hash_k.k->p))
+                       break;
 
                if (fsck_err_on(k.k->type == desc.key_type &&
                                !desc.cmp_bkey(k, hash_k), c,
                                "duplicate hash table keys:\n%s",
                                (bch2_bkey_val_to_text(&PBUF(buf), c,
                                                       hash_k), buf))) {
-                       ret = fsck_hash_delete_at(trans, desc, hash_info, k_iter);
-                       if (ret)
-                               return ret;
-                       ret = 1;
+                       ret = bch2_hash_delete_at(trans, desc, hash_info, k_iter, 0) ?: 1;
                        break;
                }
 
                if (bkey_deleted(k.k)) {
-                       bch2_trans_iter_free(trans, iter);
+                       bch2_trans_iter_exit(trans, &iter);
                        goto bad_hash;
                }
 
        }
-       bch2_trans_iter_free(trans, iter);
+       bch2_trans_iter_exit(trans, &iter);
        return ret;
 bad_hash:
        if (fsck_err(c, "hash table key at wrong offset: btree %u inode %llu offset %llu, "
@@ -386,9 +791,7 @@ bad_hash:
                     (bch2_bkey_val_to_text(&PBUF(buf), c, hash_k), buf)) == FSCK_ERR_IGNORE)
                return 0;
 
-       ret = __bch2_trans_do(trans, NULL, NULL,
-                             BTREE_INSERT_NOFAIL|BTREE_INSERT_LAZY_RW,
-               hash_redo_key(trans, desc, hash_info, k_iter, hash_k));
+       ret = hash_redo_key(trans, desc, hash_info, k_iter, hash_k);
        if (ret) {
                bch_err(c, "hash_redo_key err %i", ret);
                return ret;
@@ -400,30 +803,64 @@ fsck_err:
 
 static int check_inode(struct btree_trans *trans,
                       struct btree_iter *iter,
-                      struct bkey_s_c_inode inode)
+                      struct bch_inode_unpacked *prev,
+                      bool full)
 {
        struct bch_fs *c = trans->c;
+       struct bkey_s_c k;
        struct bch_inode_unpacked u;
        bool do_update = false;
-       int ret = 0;
+       int ret;
 
-       ret = bch2_inode_unpack(inode, &u);
+       k = bch2_btree_iter_peek(iter);
+       if (!k.k)
+               return 0;
 
-       if (bch2_fs_inconsistent_on(ret, c,
-                        "error unpacking inode %llu in fsck",
-                        inode.k->p.inode))
+       ret = bkey_err(k);
+       if (ret)
                return ret;
 
+       ret = check_key_has_snapshot(trans, iter, k);
+       if (ret)
+               return ret < 0 ? ret : 0;
+
+       /*
+        * if snapshot id isn't a leaf node, skip it - deletion in
+        * particular is not atomic, so on the internal snapshot nodes
+        * we can see inodes marked for deletion after a clean shutdown
+        */
+       if (bch2_snapshot_internal_node(c, k.k->p.snapshot))
+               return 0;
+
+       if (!bkey_is_inode(k.k))
+               return 0;
+
+       BUG_ON(bch2_inode_unpack(k, &u));
+
+       if (!full &&
+           !(u.bi_flags & (BCH_INODE_I_SIZE_DIRTY|
+                           BCH_INODE_I_SECTORS_DIRTY|
+                           BCH_INODE_UNLINKED)))
+               return 0;
+
+       if (prev->bi_inum != u.bi_inum)
+               *prev = u;
+
+       if (fsck_err_on(prev->bi_hash_seed      != u.bi_hash_seed ||
+                       inode_d_type(prev)      != inode_d_type(&u), c,
+                       "inodes in different snapshots don't match")) {
+               bch_err(c, "repair not implemented yet");
+               return -EINVAL;
+       }
+
        if (u.bi_flags & BCH_INODE_UNLINKED &&
            (!c->sb.clean ||
             fsck_err(c, "filesystem marked clean, but inode %llu unlinked",
                      u.bi_inum))) {
-               bch_verbose(c, "deleting inode %llu", u.bi_inum);
-
                bch2_trans_unlock(trans);
                bch2_fs_lazy_rw(c);
 
-               ret = bch2_inode_rm(c, u.bi_inum, false);
+               ret = fsck_inode_rm(trans, u.bi_inum, iter->pos.snapshot);
                if (ret)
                        bch_err(c, "error in fsck: error %i while deleting inode", ret);
                return ret;
@@ -443,9 +880,10 @@ static int check_inode(struct btree_trans *trans,
                 * just switch units to bytes and that issue goes away
                 */
                ret = bch2_btree_delete_range_trans(trans, BTREE_ID_extents,
-                               POS(u.bi_inum, round_up(u.bi_size, block_bytes(c)) >> 9),
+                               SPOS(u.bi_inum, round_up(u.bi_size, block_bytes(c)) >> 9,
+                                    iter->pos.snapshot),
                                POS(u.bi_inum, U64_MAX),
-                               NULL);
+                               0, NULL);
                if (ret) {
                        bch_err(c, "error in fsck: error %i truncating inode", ret);
                        return ret;
@@ -470,7 +908,7 @@ static int check_inode(struct btree_trans *trans,
                bch_verbose(c, "recounting sectors for inode %llu",
                            u.bi_inum);
 
-               sectors = bch2_count_inode_sectors(trans, u.bi_inum);
+               sectors = bch2_count_inode_sectors(trans, u.bi_inum, iter->pos.snapshot);
                if (sectors < 0) {
                        bch_err(c, "error in fsck: error %i recounting inode sectors",
                                (int) sectors);
@@ -490,11 +928,7 @@ static int check_inode(struct btree_trans *trans,
        }
 
        if (do_update) {
-               ret = __bch2_trans_do(trans, NULL, NULL,
-                                     BTREE_INSERT_NOFAIL|
-                                     BTREE_INSERT_LAZY_RW,
-                               bch2_btree_iter_traverse(iter) ?:
-                               bch2_inode_write(trans, iter, &u));
+               ret = write_inode(trans, &u, iter->pos.snapshot);
                if (ret)
                        bch_err(c, "error in fsck: error %i "
                                "updating inode", ret);
@@ -507,41 +941,99 @@ noinline_for_stack
 static int check_inodes(struct bch_fs *c, bool full)
 {
        struct btree_trans trans;
-       struct btree_iter *iter;
-       struct bkey_s_c k;
-       struct bkey_s_c_inode inode;
+       struct btree_iter iter;
+       struct bch_inode_unpacked prev = { 0 };
        int ret;
 
        bch2_trans_init(&trans, c, BTREE_ITER_MAX, 0);
 
-       for_each_btree_key(&trans, iter, BTREE_ID_inodes, POS_MIN,
-                          BTREE_ITER_INTENT|
-                          BTREE_ITER_PREFETCH, k, ret) {
-               if (k.k->type != KEY_TYPE_inode)
-                       continue;
+       bch2_trans_iter_init(&trans, &iter, BTREE_ID_inodes, POS_MIN,
+                            BTREE_ITER_INTENT|
+                            BTREE_ITER_PREFETCH|
+                            BTREE_ITER_ALL_SNAPSHOTS);
 
-               inode = bkey_s_c_to_inode(k);
+       do {
+               ret = __bch2_trans_do(&trans, NULL, NULL,
+                                     BTREE_INSERT_LAZY_RW|
+                                     BTREE_INSERT_NOFAIL,
+                       check_inode(&trans, &iter, &prev, full));
+               if (ret)
+                       break;
+       } while (bch2_btree_iter_advance(&iter));
+       bch2_trans_iter_exit(&trans, &iter);
 
-               if (full ||
-                   (inode.v->bi_flags & (BCH_INODE_I_SIZE_DIRTY|
-                                         BCH_INODE_I_SECTORS_DIRTY|
-                                         BCH_INODE_UNLINKED))) {
-                       ret = check_inode(&trans, iter, inode);
-                       if (ret)
-                               break;
-               }
+       bch2_trans_exit(&trans);
+       return ret;
+}
+
+static int check_subvol(struct btree_trans *trans,
+                       struct btree_iter *iter)
+{
+       struct bkey_s_c k;
+       struct bkey_s_c_subvolume subvol;
+       int ret;
+
+       k = bch2_btree_iter_peek(iter);
+       if (!k.k)
+               return 0;
+
+       ret = bkey_err(k);
+       if (ret)
+               return ret;
+
+       if (k.k->type != KEY_TYPE_subvolume)
+               return 0;
+
+       subvol = bkey_s_c_to_subvolume(k);
+
+       if (BCH_SUBVOLUME_UNLINKED(subvol.v)) {
+               ret = bch2_subvolume_delete(trans, iter->pos.offset);
+               if (ret && ret != -EINTR)
+                       bch_err(trans->c, "error deleting subvolume %llu: %i",
+                               iter->pos.offset, ret);
+               if (ret)
+                       return ret;
        }
-       bch2_trans_iter_put(&trans, iter);
 
-       BUG_ON(ret == -EINTR);
+       return 0;
+}
+
+noinline_for_stack
+static int check_subvols(struct bch_fs *c)
+{
+       struct btree_trans trans;
+       struct btree_iter iter;
+       int ret;
+
+       bch2_trans_init(&trans, c, BTREE_ITER_MAX, 0);
+
+       bch2_trans_iter_init(&trans, &iter, BTREE_ID_subvolumes,
+                            POS_MIN,
+                            BTREE_ITER_INTENT|
+                            BTREE_ITER_PREFETCH);
 
-       return bch2_trans_exit(&trans) ?: ret;
+       do {
+               ret = __bch2_trans_do(&trans, NULL, NULL,
+                                     BTREE_INSERT_LAZY_RW|
+                                     BTREE_INSERT_NOFAIL,
+                                     check_subvol(&trans, &iter));
+               if (ret)
+                       break;
+       } while (bch2_btree_iter_advance(&iter));
+       bch2_trans_iter_exit(&trans, &iter);
+
+       bch2_trans_exit(&trans);
+       return ret;
 }
 
+/*
+ * Checking for overlapping extents needs to be reimplemented
+ */
+#if 0
 static int fix_overlapping_extent(struct btree_trans *trans,
                                       struct bkey_s_c k, struct bpos cut_at)
 {
-       struct btree_iter *iter;
+       struct btree_iter iter;
        struct bkey_i *u;
        int ret;
 
@@ -561,46 +1053,208 @@ static int fix_overlapping_extent(struct btree_trans *trans,
         * assume things about extent overwrites - we should be running the
         * triggers manually here
         */
-       iter = bch2_trans_get_iter(trans, BTREE_ID_extents, u->k.p,
-                                  BTREE_ITER_INTENT|BTREE_ITER_NOT_EXTENTS);
+       bch2_trans_iter_init(trans, &iter, BTREE_ID_extents, u->k.p,
+                            BTREE_ITER_INTENT|BTREE_ITER_NOT_EXTENTS);
 
-       BUG_ON(iter->flags & BTREE_ITER_IS_EXTENTS);
-       ret   = bch2_btree_iter_traverse(iter) ?:
-               bch2_trans_update(trans, iter, u, BTREE_TRIGGER_NORUN) ?:
+       BUG_ON(iter.flags & BTREE_ITER_IS_EXTENTS);
+       ret   = bch2_btree_iter_traverse(&iter) ?:
+               bch2_trans_update(trans, &iter, u, BTREE_TRIGGER_NORUN) ?:
                bch2_trans_commit(trans, NULL, NULL,
                                  BTREE_INSERT_NOFAIL|
                                  BTREE_INSERT_LAZY_RW);
-       bch2_trans_iter_put(trans, iter);
+       bch2_trans_iter_exit(trans, &iter);
        return ret;
 }
+#endif
 
-static int inode_backpointer_exists(struct btree_trans *trans,
-                                   struct bch_inode_unpacked *inode)
+static struct bkey_s_c_dirent dirent_get_by_pos(struct btree_trans *trans,
+                                               struct btree_iter *iter,
+                                               struct bpos pos)
 {
-       struct btree_iter *iter;
        struct bkey_s_c k;
        int ret;
 
-       iter = bch2_trans_get_iter(trans, BTREE_ID_dirents,
-                                  POS(inode->bi_dir, inode->bi_dir_offset), 0);
+       bch2_trans_iter_init(trans, iter, BTREE_ID_dirents, pos, 0);
        k = bch2_btree_iter_peek_slot(iter);
        ret = bkey_err(k);
+       if (!ret && k.k->type != KEY_TYPE_dirent)
+               ret = -ENOENT;
+       if (ret) {
+               bch2_trans_iter_exit(trans, iter);
+               return (struct bkey_s_c_dirent) { .k = ERR_PTR(ret) };
+       }
+
+       return bkey_s_c_to_dirent(k);
+}
+
+static bool inode_points_to_dirent(struct bch_inode_unpacked *inode,
+                                  struct bkey_s_c_dirent d)
+{
+       return  inode->bi_dir           == d.k->p.inode &&
+               inode->bi_dir_offset    == d.k->p.offset;
+}
+
+static bool dirent_points_to_inode(struct bkey_s_c_dirent d,
+                                  struct bch_inode_unpacked *inode)
+{
+       return d.v->d_type == DT_SUBVOL
+               ? le32_to_cpu(d.v->d_child_subvol)      == inode->bi_subvol
+               : le64_to_cpu(d.v->d_inum)              == inode->bi_inum;
+}
+
+static int inode_backpointer_exists(struct btree_trans *trans,
+                                   struct bch_inode_unpacked *inode,
+                                   u32 snapshot)
+{
+       struct btree_iter iter;
+       struct bkey_s_c_dirent d;
+       int ret;
+
+       d = dirent_get_by_pos(trans, &iter,
+                       SPOS(inode->bi_dir, inode->bi_dir_offset, snapshot));
+       ret = bkey_err(d.s_c);
        if (ret)
-               goto out;
-       if (k.k->type != KEY_TYPE_dirent)
-               goto out;
+               return ret;
 
-       ret = le64_to_cpu(bkey_s_c_to_dirent(k).v->d_inum) == inode->bi_inum;
-out:
-       bch2_trans_iter_free(trans, iter);
+       ret = dirent_points_to_inode(d, inode);
+       bch2_trans_iter_exit(trans, &iter);
        return ret;
 }
 
-static bool inode_backpointer_matches(struct bkey_s_c_dirent d,
-                                     struct bch_inode_unpacked *inode)
+static int check_i_sectors(struct btree_trans *trans, struct inode_walker *w)
 {
-       return d.k->p.inode == inode->bi_dir &&
-               d.k->p.offset == inode->bi_dir_offset;
+       struct bch_fs *c = trans->c;
+       struct inode_walker_entry *i;
+       int ret = 0, ret2 = 0;
+       s64 count2;
+
+       for (i = w->d; i < w->d + w->nr; i++) {
+               if (i->inode.bi_sectors == i->count)
+                       continue;
+
+               count2 = lockrestart_do(trans,
+                       bch2_count_inode_sectors(trans, w->cur_inum, i->snapshot));
+
+               if (i->count != count2) {
+                       bch_err(c, "fsck counted i_sectors wrong: got %llu should be %llu",
+                               i->count, count2);
+                       i->count = count2;
+                       if (i->inode.bi_sectors == i->count)
+                               continue;
+               }
+
+               if (fsck_err_on(!(i->inode.bi_flags & BCH_INODE_I_SECTORS_DIRTY), c,
+                           "inode %llu:%u has incorrect i_sectors: got %llu, should be %llu",
+                           w->cur_inum, i->snapshot,
+                           i->inode.bi_sectors, i->count) == FSCK_ERR_IGNORE)
+                       continue;
+
+               i->inode.bi_sectors = i->count;
+               ret = write_inode(trans, &i->inode, i->snapshot);
+               if (ret)
+                       break;
+               ret2 = -EINTR;
+       }
+fsck_err:
+       return ret ?: ret2;
+}
+
+static int check_extent(struct btree_trans *trans, struct btree_iter *iter,
+                       struct inode_walker *inode,
+                       struct snapshots_seen *s)
+{
+       struct bch_fs *c = trans->c;
+       struct bkey_s_c k;
+       struct inode_walker_entry *i;
+       char buf[200];
+       int ret = 0;
+
+       k = bch2_btree_iter_peek(iter);
+       if (!k.k)
+               return 0;
+
+       ret = bkey_err(k);
+       if (ret)
+               return ret;
+
+       ret = check_key_has_snapshot(trans, iter, k);
+       if (ret)
+               return ret < 0 ? ret : 0;
+
+       ret = snapshots_seen_update(c, s, k.k->p);
+       if (ret)
+               return ret;
+
+       if (k.k->type == KEY_TYPE_whiteout)
+               return 0;
+
+       if (inode->cur_inum != k.k->p.inode) {
+               ret = check_i_sectors(trans, inode);
+               if (ret)
+                       return ret;
+       }
+#if 0
+       if (bkey_cmp(prev.k->k.p, bkey_start_pos(k.k)) > 0) {
+               char buf1[200];
+               char buf2[200];
+
+               bch2_bkey_val_to_text(&PBUF(buf1), c, bkey_i_to_s_c(prev.k));
+               bch2_bkey_val_to_text(&PBUF(buf2), c, k);
+
+               if (fsck_err(c, "overlapping extents:\n%s\n%s", buf1, buf2))
+                       return fix_overlapping_extent(trans, k, prev.k->k.p) ?: -EINTR;
+       }
+#endif
+       ret = __walk_inode(trans, inode, k.k->p);
+       if (ret < 0)
+               return ret;
+
+       if (fsck_err_on(ret == INT_MAX, c,
+                       "extent in missing inode:\n  %s",
+                       (bch2_bkey_val_to_text(&PBUF(buf), c, k), buf)))
+               return bch2_btree_delete_at(trans, iter,
+                                           BTREE_UPDATE_INTERNAL_SNAPSHOT_NODE);
+
+       if (ret == INT_MAX)
+               return 0;
+
+       i = inode->d + ret;
+       ret = 0;
+
+       if (fsck_err_on(!S_ISREG(i->inode.bi_mode) &&
+                       !S_ISLNK(i->inode.bi_mode), c,
+                       "extent in non regular inode mode %o:\n  %s",
+                       i->inode.bi_mode,
+                       (bch2_bkey_val_to_text(&PBUF(buf), c, k), buf)))
+               return bch2_btree_delete_at(trans, iter,
+                                           BTREE_UPDATE_INTERNAL_SNAPSHOT_NODE);
+
+       if (!bch2_snapshot_internal_node(c, k.k->p.snapshot)) {
+               for_each_visible_inode(c, s, inode, k.k->p.snapshot, i) {
+                       if (fsck_err_on(!(i->inode.bi_flags & BCH_INODE_I_SIZE_DIRTY) &&
+                                       k.k->type != KEY_TYPE_reservation &&
+                                       k.k->p.offset > round_up(i->inode.bi_size, block_bytes(c)) >> 9, c,
+                                       "extent type %u offset %llu past end of inode %llu, i_size %llu",
+                                       k.k->type, k.k->p.offset, k.k->p.inode, i->inode.bi_size)) {
+                               bch2_fs_lazy_rw(c);
+                               return bch2_btree_delete_range_trans(trans, BTREE_ID_extents,
+                                               SPOS(k.k->p.inode, round_up(i->inode.bi_size, block_bytes(c)) >> 9,
+                                                    k.k->p.snapshot),
+                                               POS(k.k->p.inode, U64_MAX),
+                                               0, NULL) ?: -EINTR;
+                       }
+               }
+       }
+
+       if (bkey_extent_is_allocation(k.k))
+               for_each_visible_inode(c, s, inode, k.k->p.snapshot, i)
+                       i->count += k.k->size;
+#if 0
+       bch2_bkey_buf_reassemble(&prev, c, k);
+#endif
+
+fsck_err:
+       return ret;
 }
 
 /*
@@ -611,97 +1265,344 @@ noinline_for_stack
 static int check_extents(struct bch_fs *c)
 {
        struct inode_walker w = inode_walker_init();
+       struct snapshots_seen s;
        struct btree_trans trans;
-       struct btree_iter *iter;
-       struct bkey_s_c k;
-       struct bkey_buf prev;
-       u64 i_sectors = 0;
+       struct btree_iter iter;
        int ret = 0;
 
+#if 0
+       struct bkey_buf prev;
        bch2_bkey_buf_init(&prev);
        prev.k->k = KEY(0, 0, 0);
+#endif
+       snapshots_seen_init(&s);
        bch2_trans_init(&trans, c, BTREE_ITER_MAX, 0);
 
        bch_verbose(c, "checking extents");
 
-       iter = bch2_trans_get_iter(&trans, BTREE_ID_extents,
-                                  POS(BCACHEFS_ROOT_INO, 0),
-                                  BTREE_ITER_INTENT|
-                                  BTREE_ITER_PREFETCH);
-retry:
-       while ((k = bch2_btree_iter_peek(iter)).k &&
-              !(ret = bkey_err(k))) {
-               if (w.have_inode &&
-                   w.cur_inum != k.k->p.inode &&
-                   !(w.inode.bi_flags & BCH_INODE_I_SECTORS_DIRTY) &&
-                   fsck_err_on(w.inode.bi_sectors != i_sectors, c,
-                               "inode %llu has incorrect i_sectors: got %llu, should be %llu",
-                               w.inode.bi_inum,
-                               w.inode.bi_sectors, i_sectors)) {
-                       w.inode.bi_sectors = i_sectors;
-
-                       ret = write_inode(&trans, &w.inode, w.snapshot);
+       bch2_trans_iter_init(&trans, &iter, BTREE_ID_extents,
+                            POS(BCACHEFS_ROOT_INO, 0),
+                            BTREE_ITER_INTENT|
+                            BTREE_ITER_PREFETCH|
+                            BTREE_ITER_ALL_SNAPSHOTS);
+
+       do {
+               ret = __bch2_trans_do(&trans, NULL, NULL,
+                                     BTREE_INSERT_LAZY_RW|
+                                     BTREE_INSERT_NOFAIL,
+                       check_extent(&trans, &iter, &w, &s));
+               if (ret)
+                       break;
+       } while (bch2_btree_iter_advance(&iter));
+       bch2_trans_iter_exit(&trans, &iter);
+#if 0
+       bch2_bkey_buf_exit(&prev, c);
+#endif
+       inode_walker_exit(&w);
+       bch2_trans_exit(&trans);
+       snapshots_seen_exit(&s);
+
+       return ret;
+}
+
+static int check_subdir_count(struct btree_trans *trans, struct inode_walker *w)
+{
+       struct bch_fs *c = trans->c;
+       struct inode_walker_entry *i;
+       int ret = 0, ret2 = 0;
+       s64 count2;
+
+       for (i = w->d; i < w->d + w->nr; i++) {
+               if (i->inode.bi_nlink == i->count)
+                       continue;
+
+               count2 = bch2_count_subdirs(trans, w->cur_inum, i->snapshot);
+               if (count2 < 0)
+                       return count2;
+
+               if (i->count != count2) {
+                       bch_err(c, "fsck counted subdirectories wrong: got %llu should be %llu",
+                               i->count, count2);
+                       i->count = count2;
+                       if (i->inode.bi_nlink == i->count)
+                               continue;
+               }
+
+               if (fsck_err_on(i->inode.bi_nlink != i->count, c,
+                               "directory %llu:%u with wrong i_nlink: got %u, should be %llu",
+                               w->cur_inum, i->snapshot, i->inode.bi_nlink, i->count)) {
+                       i->inode.bi_nlink = i->count;
+                       ret = write_inode(trans, &i->inode, i->snapshot);
                        if (ret)
                                break;
+                       ret2 = -EINTR;
                }
+       }
+fsck_err:
+       return ret ?: ret2;
+}
+
+static int check_dirent_target(struct btree_trans *trans,
+                              struct btree_iter *iter,
+                              struct bkey_s_c_dirent d,
+                              struct bch_inode_unpacked *target,
+                              u32 target_snapshot)
+{
+       struct bch_fs *c = trans->c;
+       struct bkey_i_dirent *n;
+       bool backpointer_exists = true;
+       char buf[200];
+       int ret = 0;
 
-               if (bkey_cmp(prev.k->k.p, bkey_start_pos(k.k)) > 0) {
-                       char buf1[200];
-                       char buf2[200];
+       if (!target->bi_dir &&
+           !target->bi_dir_offset) {
+               target->bi_dir          = d.k->p.inode;
+               target->bi_dir_offset   = d.k->p.offset;
 
-                       bch2_bkey_val_to_text(&PBUF(buf1), c, bkey_i_to_s_c(prev.k));
-                       bch2_bkey_val_to_text(&PBUF(buf2), c, k);
+               ret = __write_inode(trans, target, target_snapshot);
+               if (ret)
+                       goto err;
+       }
 
-                       if (fsck_err(c, "overlapping extents:\n%s\n%s", buf1, buf2))
-                               return fix_overlapping_extent(&trans, k, prev.k->k.p) ?: -EINTR;
+       if (!inode_points_to_dirent(target, d)) {
+               ret = inode_backpointer_exists(trans, target, d.k->p.snapshot);
+               if (ret < 0)
+                       goto err;
+
+               backpointer_exists = ret;
+               ret = 0;
+
+               if (fsck_err_on(S_ISDIR(target->bi_mode) &&
+                               backpointer_exists, c,
+                               "directory %llu with multiple links",
+                               target->bi_inum)) {
+                       ret = __remove_dirent(trans, d.k->p);
+                       if (ret)
+                               goto err;
+                       return 0;
+               }
+
+               if (fsck_err_on(backpointer_exists &&
+                               !target->bi_nlink, c,
+                               "inode %llu has multiple links but i_nlink 0",
+                               target->bi_inum)) {
+                       target->bi_nlink++;
+                       target->bi_flags &= ~BCH_INODE_UNLINKED;
+
+                       ret = __write_inode(trans, target, target_snapshot);
+                       if (ret)
+                               goto err;
                }
 
-               ret = walk_inode(&trans, &w, k.k->p.inode);
+               if (fsck_err_on(!backpointer_exists, c,
+                               "inode %llu:%u has wrong backpointer:\n"
+                               "got       %llu:%llu\n"
+                               "should be %llu:%llu",
+                               target->bi_inum, target_snapshot,
+                               target->bi_dir,
+                               target->bi_dir_offset,
+                               d.k->p.inode,
+                               d.k->p.offset)) {
+                       target->bi_dir          = d.k->p.inode;
+                       target->bi_dir_offset   = d.k->p.offset;
+
+                       ret = __write_inode(trans, target, target_snapshot);
+                       if (ret)
+                               goto err;
+               }
+       }
+
+       if (fsck_err_on(d.v->d_type != inode_d_type(target), c,
+                       "incorrect d_type: got %s, should be %s:\n%s",
+                       bch2_d_type_str(d.v->d_type),
+                       bch2_d_type_str(inode_d_type(target)),
+                       (bch2_bkey_val_to_text(&PBUF(buf), c, d.s_c), buf))) {
+               n = bch2_trans_kmalloc(trans, bkey_bytes(d.k));
+               ret = PTR_ERR_OR_ZERO(n);
                if (ret)
-                       break;
+                       return ret;
+
+               bkey_reassemble(&n->k_i, d.s_c);
+               n->v.d_type = inode_d_type(target);
+
+               ret = bch2_trans_update(trans, iter, &n->k_i, 0);
+               if (ret)
+                       return ret;
+
+               d = dirent_i_to_s_c(n);
+       }
+
+       if (d.v->d_type == DT_SUBVOL &&
+           target->bi_parent_subvol != le32_to_cpu(d.v->d_parent_subvol) &&
+           (c->sb.version < bcachefs_metadata_version_subvol_dirent ||
+            fsck_err(c, "dirent has wrong d_parent_subvol field: got %u, should be %u",
+                     le32_to_cpu(d.v->d_parent_subvol),
+                     target->bi_parent_subvol))) {
+               n = bch2_trans_kmalloc(trans, bkey_bytes(d.k));
+               ret = PTR_ERR_OR_ZERO(n);
+               if (ret)
+                       return ret;
+
+               bkey_reassemble(&n->k_i, d.s_c);
+               n->v.d_parent_subvol = cpu_to_le32(target->bi_parent_subvol);
+
+               ret = bch2_trans_update(trans, iter, &n->k_i, 0);
+               if (ret)
+                       return ret;
+
+               d = dirent_i_to_s_c(n);
+       }
+err:
+fsck_err:
+       return ret;
+}
+
+static int check_dirent(struct btree_trans *trans, struct btree_iter *iter,
+                       struct bch_hash_info *hash_info,
+                       struct inode_walker *dir,
+                       struct inode_walker *target,
+                       struct snapshots_seen *s)
+{
+       struct bch_fs *c = trans->c;
+       struct bkey_s_c k;
+       struct bkey_s_c_dirent d;
+       struct inode_walker_entry *i;
+       char buf[200];
+       int ret;
+
+       k = bch2_btree_iter_peek(iter);
+       if (!k.k)
+               return 0;
+
+       ret = bkey_err(k);
+       if (ret)
+               return ret;
+
+       ret = check_key_has_snapshot(trans, iter, k);
+       if (ret)
+               return ret < 0 ? ret : 0;
+
+       ret = snapshots_seen_update(c, s, k.k->p);
+       if (ret)
+               return ret;
+
+       if (k.k->type == KEY_TYPE_whiteout)
+               return 0;
 
-               if (w.first_this_inode)
-                       i_sectors = 0;
-
-               if (fsck_err_on(!w.have_inode, c,
-                               "extent type %u for missing inode %llu",
-                               k.k->type, k.k->p.inode) ||
-                   fsck_err_on(w.have_inode &&
-                               !S_ISREG(w.inode.bi_mode) && !S_ISLNK(w.inode.bi_mode), c,
-                               "extent type %u for non regular file, inode %llu mode %o",
-                               k.k->type, k.k->p.inode, w.inode.bi_mode)) {
-                       bch2_fs_lazy_rw(c);
-                       return bch2_btree_delete_range_trans(&trans, BTREE_ID_extents,
-                                                      POS(k.k->p.inode, 0),
-                                                      POS(k.k->p.inode, U64_MAX),
-                                                      NULL) ?: -EINTR;
+       if (dir->cur_inum != k.k->p.inode) {
+               ret = check_subdir_count(trans, dir);
+               if (ret)
+                       return ret;
+       }
+
+       ret = __walk_inode(trans, dir, k.k->p);
+       if (ret < 0)
+               return ret;
+
+       if (fsck_err_on(ret == INT_MAX, c,
+                       "dirent in nonexisting directory:\n%s",
+                       (bch2_bkey_val_to_text(&PBUF(buf), c, k), buf)))
+               return bch2_btree_delete_at(trans, iter,
+                               BTREE_UPDATE_INTERNAL_SNAPSHOT_NODE);
+
+       if (ret == INT_MAX)
+               return 0;
+
+       i = dir->d + ret;
+       ret = 0;
+
+       if (fsck_err_on(!S_ISDIR(i->inode.bi_mode), c,
+                       "dirent in non directory inode type %s:\n%s",
+                       bch2_d_type_str(inode_d_type(&i->inode)),
+                       (bch2_bkey_val_to_text(&PBUF(buf), c, k), buf)))
+               return bch2_btree_delete_at(trans, iter, 0);
+
+       if (dir->first_this_inode)
+               *hash_info = bch2_hash_info_init(c, &dir->d[0].inode);
+
+       ret = hash_check_key(trans, bch2_dirent_hash_desc,
+                            hash_info, iter, k);
+       if (ret < 0)
+               return ret;
+       if (ret) /* dirent has been deleted */
+               return 0;
+
+       if (k.k->type != KEY_TYPE_dirent)
+               return 0;
+
+       d = bkey_s_c_to_dirent(k);
+
+       if (d.v->d_type == DT_SUBVOL) {
+               struct bch_inode_unpacked subvol_root;
+               u32 target_subvol = le32_to_cpu(d.v->d_child_subvol);
+               u32 target_snapshot;
+               u64 target_inum;
+
+               ret = __subvol_lookup(trans, target_subvol,
+                                     &target_snapshot, &target_inum);
+               if (ret && ret != -ENOENT)
+                       return ret;
+
+               if (fsck_err_on(ret, c,
+                               "dirent points to missing subvolume %llu",
+                               le64_to_cpu(d.v->d_child_subvol)))
+                       return __remove_dirent(trans, d.k->p);
+
+               ret = __lookup_inode(trans, target_inum,
+                                  &subvol_root, &target_snapshot);
+               if (ret && ret != -ENOENT)
+                       return ret;
+
+               if (fsck_err_on(ret, c,
+                               "subvolume %u points to missing subvolume root %llu",
+                               target_subvol,
+                               target_inum)) {
+                       bch_err(c, "repair not implemented yet");
+                       return -EINVAL;
+               }
+
+               if (fsck_err_on(subvol_root.bi_subvol != target_subvol, c,
+                               "subvol root %llu has wrong bi_subvol field: got %u, should be %u",
+                               target_inum,
+                               subvol_root.bi_subvol, target_subvol)) {
+                       subvol_root.bi_subvol = target_subvol;
+                       ret = __write_inode(trans, &subvol_root, target_snapshot);
+                       if (ret)
+                               return ret;
                }
 
-               if (fsck_err_on(w.have_inode &&
-                               !(w.inode.bi_flags & BCH_INODE_I_SIZE_DIRTY) &&
-                               k.k->type != KEY_TYPE_reservation &&
-                               k.k->p.offset > round_up(w.inode.bi_size, block_bytes(c)) >> 9, c,
-                               "extent type %u offset %llu past end of inode %llu, i_size %llu",
-                               k.k->type, k.k->p.offset, k.k->p.inode, w.inode.bi_size)) {
-                       bch2_fs_lazy_rw(c);
-                       return bch2_btree_delete_range_trans(&trans, BTREE_ID_extents,
-                                       POS(k.k->p.inode, round_up(w.inode.bi_size, block_bytes(c)) >> 9),
-                                       POS(k.k->p.inode, U64_MAX),
-                                       NULL) ?: -EINTR;
+               ret = check_dirent_target(trans, iter, d, &subvol_root,
+                                         target_snapshot);
+               if (ret)
+                       return ret;
+       } else {
+               ret = __get_visible_inodes(trans, target, s, le64_to_cpu(d.v->d_inum));
+               if (ret)
+                       return ret;
+
+               if (fsck_err_on(!target->nr, c,
+                               "dirent points to missing inode:\n%s",
+                               (bch2_bkey_val_to_text(&PBUF(buf), c,
+                                                      k), buf))) {
+                       ret = __remove_dirent(trans, d.k->p);
+                       if (ret)
+                               return ret;
+               }
+
+               for (i = target->d; i < target->d + target->nr; i++) {
+                       ret = check_dirent_target(trans, iter, d,
+                                                 &i->inode, i->snapshot);
+                       if (ret)
+                               return ret;
                }
+       }
 
-               if (bkey_extent_is_allocation(k.k))
-                       i_sectors += k.k->size;
-               bch2_bkey_buf_reassemble(&prev, c, k);
+       if (d.v->d_type == DT_DIR)
+               for_each_visible_inode(c, s, dir, d.k->p.snapshot, i)
+                       i->count++;
 
-               bch2_btree_iter_advance(iter);
-       }
 fsck_err:
-       if (ret == -EINTR)
-               goto retry;
-       bch2_trans_iter_put(&trans, iter);
-       bch2_bkey_buf_exit(&prev, c);
-       return bch2_trans_exit(&trans) ?: ret;
+       return ret;
 }
 
 /*
@@ -711,204 +1612,83 @@ fsck_err:
 noinline_for_stack
 static int check_dirents(struct bch_fs *c)
 {
-       struct inode_walker w = inode_walker_init();
+       struct inode_walker dir = inode_walker_init();
+       struct inode_walker target = inode_walker_init();
+       struct snapshots_seen s;
        struct bch_hash_info hash_info;
        struct btree_trans trans;
-       struct btree_iter *iter;
-       struct bkey_s_c k;
-       char buf[200];
-       unsigned nr_subdirs = 0;
+       struct btree_iter iter;
        int ret = 0;
 
        bch_verbose(c, "checking dirents");
 
+       snapshots_seen_init(&s);
        bch2_trans_init(&trans, c, BTREE_ITER_MAX, 0);
 
-       iter = bch2_trans_get_iter(&trans, BTREE_ID_dirents,
-                                  POS(BCACHEFS_ROOT_INO, 0),
-                                  BTREE_ITER_INTENT|
-                                  BTREE_ITER_PREFETCH);
-retry:
-       while ((k = bch2_btree_iter_peek(iter)).k &&
-              !(ret = bkey_err(k))) {
-               struct bkey_s_c_dirent d;
-               struct bch_inode_unpacked target;
-               u32 target_snapshot;
-               bool have_target;
-               bool backpointer_exists = true;
-               u64 d_inum;
-
-               if (w.have_inode &&
-                   w.cur_inum != k.k->p.inode &&
-                   fsck_err_on(w.inode.bi_nlink != nr_subdirs, c,
-                               "directory %llu with wrong i_nlink: got %u, should be %u",
-                               w.inode.bi_inum, w.inode.bi_nlink, nr_subdirs)) {
-                       w.inode.bi_nlink = nr_subdirs;
-                       ret = write_inode(&trans, &w.inode, w.snapshot);
-                       if (ret)
-                               break;
-               }
-
-               ret = walk_inode(&trans, &w, k.k->p.inode);
-               if (ret)
-                       break;
-
-               if (w.first_this_inode)
-                       nr_subdirs = 0;
-
-               if (fsck_err_on(!w.have_inode, c,
-                               "dirent in nonexisting directory:\n%s",
-                               (bch2_bkey_val_to_text(&PBUF(buf), c,
-                                                      k), buf)) ||
-                   fsck_err_on(!S_ISDIR(w.inode.bi_mode), c,
-                               "dirent in non directory inode type %u:\n%s",
-                               mode_to_type(w.inode.bi_mode),
-                               (bch2_bkey_val_to_text(&PBUF(buf), c,
-                                                      k), buf))) {
-                       ret = __bch2_trans_do(&trans, NULL, NULL, 0,
-                                       bch2_btree_delete_at(&trans, iter, 0));
-                       if (ret)
-                               goto err;
-                       goto next;
-               }
-
-               if (!w.have_inode)
-                       goto next;
-
-               if (w.first_this_inode)
-                       hash_info = bch2_hash_info_init(c, &w.inode);
+       bch2_trans_iter_init(&trans, &iter, BTREE_ID_dirents,
+                            POS(BCACHEFS_ROOT_INO, 0),
+                            BTREE_ITER_INTENT|
+                            BTREE_ITER_PREFETCH|
+                            BTREE_ITER_ALL_SNAPSHOTS);
 
-               ret = hash_check_key(&trans, bch2_dirent_hash_desc,
-                                    &hash_info, iter, k);
-               if (ret > 0) {
-                       ret = 0;
-                       goto next;
-               }
+       do {
+               ret = __bch2_trans_do(&trans, NULL, NULL,
+                                     BTREE_INSERT_LAZY_RW|
+                                     BTREE_INSERT_NOFAIL,
+                       check_dirent(&trans, &iter, &hash_info,
+                                    &dir, &target, &s));
                if (ret)
-                       goto fsck_err;
-
-               if (k.k->type != KEY_TYPE_dirent)
-                       goto next;
-
-               d = bkey_s_c_to_dirent(k);
-               d_inum = le64_to_cpu(d.v->d_inum);
-
-               ret = lookup_inode(&trans, d_inum, &target, &target_snapshot);
-               if (ret && ret != -ENOENT)
                        break;
+       } while (bch2_btree_iter_advance(&iter));
+       bch2_trans_iter_exit(&trans, &iter);
 
-               have_target = !ret;
-               ret = 0;
-
-               if (fsck_err_on(!have_target, c,
-                               "dirent points to missing inode:\n%s",
-                               (bch2_bkey_val_to_text(&PBUF(buf), c,
-                                                      k), buf))) {
-                       ret = remove_dirent(&trans, d.k->p);
-                       if (ret)
-                               goto err;
-                       goto next;
-               }
-
-               if (!have_target)
-                       goto next;
-
-               if (!target.bi_dir &&
-                   !target.bi_dir_offset) {
-                       target.bi_dir           = k.k->p.inode;
-                       target.bi_dir_offset    = k.k->p.offset;
-
-                       ret = write_inode(&trans, &target, target_snapshot);
-                       if (ret)
-                               goto err;
-               }
-
-               if (!inode_backpointer_matches(d, &target)) {
-                       ret = inode_backpointer_exists(&trans, &target);
-                       if (ret < 0)
-                               goto err;
-
-                       backpointer_exists = ret;
-                       ret = 0;
+       bch2_trans_exit(&trans);
+       snapshots_seen_exit(&s);
+       inode_walker_exit(&dir);
+       inode_walker_exit(&target);
+       return ret;
+}
 
-                       if (fsck_err_on(S_ISDIR(target.bi_mode) &&
-                                       backpointer_exists, c,
-                                       "directory %llu with multiple links",
-                                       target.bi_inum)) {
-                               ret = remove_dirent(&trans, d.k->p);
-                               if (ret)
-                                       goto err;
-                               continue;
-                       }
+static int check_xattr(struct btree_trans *trans, struct btree_iter *iter,
+                      struct bch_hash_info *hash_info,
+                      struct inode_walker *inode)
+{
+       struct bch_fs *c = trans->c;
+       struct bkey_s_c k;
+       int ret;
 
-                       if (fsck_err_on(backpointer_exists &&
-                                       !target.bi_nlink, c,
-                                       "inode %llu has multiple links but i_nlink 0",
-                                       d_inum)) {
-                               target.bi_nlink++;
-                               target.bi_flags &= ~BCH_INODE_UNLINKED;
+       k = bch2_btree_iter_peek(iter);
+       if (!k.k)
+               return 0;
 
-                               ret = write_inode(&trans, &target, target_snapshot);
-                               if (ret)
-                                       goto err;
-                       }
+       ret = bkey_err(k);
+       if (ret)
+               return ret;
 
-                       if (fsck_err_on(!backpointer_exists, c,
-                                       "inode %llu has wrong backpointer:\n"
-                                       "got       %llu:%llu\n"
-                                       "should be %llu:%llu",
-                                       d_inum,
-                                       target.bi_dir,
-                                       target.bi_dir_offset,
-                                       k.k->p.inode,
-                                       k.k->p.offset)) {
-                               target.bi_dir           = k.k->p.inode;
-                               target.bi_dir_offset    = k.k->p.offset;
-
-                               ret = write_inode(&trans, &target, target_snapshot);
-                               if (ret)
-                                       goto err;
-                       }
-               }
+       ret = check_key_has_snapshot(trans, iter, k);
+       if (ret)
+               return ret;
 
-               if (fsck_err_on(d.v->d_type != mode_to_type(target.bi_mode), c,
-                               "incorrect d_type: should be %u:\n%s",
-                               mode_to_type(target.bi_mode),
-                               (bch2_bkey_val_to_text(&PBUF(buf), c,
-                                                      k), buf))) {
-                       struct bkey_i_dirent *n;
+       ret = __walk_inode(trans, inode, k.k->p);
+       if (ret < 0)
+               return ret;
 
-                       n = kmalloc(bkey_bytes(d.k), GFP_KERNEL);
-                       if (!n) {
-                               ret = -ENOMEM;
-                               goto err;
-                       }
+       if (fsck_err_on(ret == INT_MAX, c,
+                       "xattr for missing inode %llu",
+                       k.k->p.inode))
+               return bch2_btree_delete_at(trans, iter, 0);
 
-                       bkey_reassemble(&n->k_i, d.s_c);
-                       n->v.d_type = mode_to_type(target.bi_mode);
+       if (ret == INT_MAX)
+               return 0;
 
-                       ret = __bch2_trans_do(&trans, NULL, NULL,
-                                             BTREE_INSERT_NOFAIL|
-                                             BTREE_INSERT_LAZY_RW,
-                               bch2_btree_iter_traverse(iter) ?:
-                               bch2_trans_update(&trans, iter, &n->k_i, 0));
-                       kfree(n);
-                       if (ret)
-                               goto err;
+       ret = 0;
 
-               }
+       if (inode->first_this_inode)
+               *hash_info = bch2_hash_info_init(c, &inode->d[0].inode);
 
-               nr_subdirs += d.v->d_type == DT_DIR;
-next:
-               bch2_btree_iter_advance(iter);
-       }
-err:
+       ret = hash_check_key(trans, bch2_xattr_hash_desc, hash_info, iter, k);
 fsck_err:
-       if (ret == -EINTR)
-               goto retry;
-
-       bch2_trans_iter_put(&trans, iter);
-       return bch2_trans_exit(&trans) ?: ret;
+       return ret;
 }
 
 /*
@@ -917,90 +1697,101 @@ fsck_err:
 noinline_for_stack
 static int check_xattrs(struct bch_fs *c)
 {
-       struct inode_walker w = inode_walker_init();
+       struct inode_walker inode = inode_walker_init();
        struct bch_hash_info hash_info;
        struct btree_trans trans;
-       struct btree_iter *iter;
-       struct bkey_s_c k;
+       struct btree_iter iter;
        int ret = 0;
 
        bch_verbose(c, "checking xattrs");
 
        bch2_trans_init(&trans, c, BTREE_ITER_MAX, 0);
 
-       iter = bch2_trans_get_iter(&trans, BTREE_ID_xattrs,
-                                  POS(BCACHEFS_ROOT_INO, 0),
-                                  BTREE_ITER_INTENT|
-                                  BTREE_ITER_PREFETCH);
-retry:
-       while ((k = bch2_btree_iter_peek(iter)).k &&
-              !(ret = bkey_err(k))) {
-               ret = walk_inode(&trans, &w, k.k->p.inode);
-               if (ret)
-                       break;
-
-               if (fsck_err_on(!w.have_inode, c,
-                               "xattr for missing inode %llu",
-                               k.k->p.inode)) {
-                       ret = bch2_btree_delete_at(&trans, iter, 0);
-                       if (ret)
-                               break;
-                       continue;
-               }
-
-               if (w.first_this_inode && w.have_inode)
-                       hash_info = bch2_hash_info_init(c, &w.inode);
+       bch2_trans_iter_init(&trans, &iter, BTREE_ID_xattrs,
+                            POS(BCACHEFS_ROOT_INO, 0),
+                            BTREE_ITER_INTENT|
+                            BTREE_ITER_PREFETCH|
+                            BTREE_ITER_ALL_SNAPSHOTS);
 
-               ret = hash_check_key(&trans, bch2_xattr_hash_desc,
-                                    &hash_info, iter, k);
+       do {
+               ret = __bch2_trans_do(&trans, NULL, NULL,
+                                     BTREE_INSERT_LAZY_RW|
+                                     BTREE_INSERT_NOFAIL,
+                                     check_xattr(&trans, &iter, &hash_info,
+                                                 &inode));
                if (ret)
                        break;
+       } while (bch2_btree_iter_advance(&iter));
+       bch2_trans_iter_exit(&trans, &iter);
 
-               bch2_btree_iter_advance(iter);
-       }
-fsck_err:
-       if (ret == -EINTR)
-               goto retry;
-
-       bch2_trans_iter_put(&trans, iter);
-       return bch2_trans_exit(&trans) ?: ret;
+       bch2_trans_exit(&trans);
+       return ret;
 }
 
-/* Get root directory, create if it doesn't exist: */
-static int check_root(struct bch_fs *c, struct bch_inode_unpacked *root_inode)
+static int check_root_trans(struct btree_trans *trans)
 {
-       struct bkey_inode_buf packed;
+       struct bch_fs *c = trans->c;
+       struct bch_inode_unpacked root_inode;
        u32 snapshot;
+       u64 inum;
        int ret;
 
-       bch_verbose(c, "checking root directory");
-
-       ret = bch2_trans_do(c, NULL, NULL, 0,
-               lookup_inode(&trans, BCACHEFS_ROOT_INO, root_inode, &snapshot));
+       ret = __subvol_lookup(trans, BCACHEFS_ROOT_SUBVOL, &snapshot, &inum);
        if (ret && ret != -ENOENT)
                return ret;
 
-       if (fsck_err_on(ret, c, "root directory missing"))
-               goto create_root;
+       if (mustfix_fsck_err_on(ret, c, "root subvol missing")) {
+               struct bkey_i_subvolume root_subvol;
 
-       if (fsck_err_on(!S_ISDIR(root_inode->bi_mode), c,
-                       "root inode not a directory"))
-               goto create_root;
+               snapshot        = U32_MAX;
+               inum            = BCACHEFS_ROOT_INO;
 
-       return 0;
+               bkey_subvolume_init(&root_subvol.k_i);
+               root_subvol.k.p.offset = BCACHEFS_ROOT_SUBVOL;
+               root_subvol.v.flags     = 0;
+               root_subvol.v.snapshot  = cpu_to_le32(snapshot);
+               root_subvol.v.inode     = cpu_to_le64(inum);
+               ret = __bch2_trans_do(trans, NULL, NULL,
+                                     BTREE_INSERT_NOFAIL|
+                                     BTREE_INSERT_LAZY_RW,
+                       __bch2_btree_insert(trans, BTREE_ID_subvolumes, &root_subvol.k_i));
+               if (ret) {
+                       bch_err(c, "error writing root subvol: %i", ret);
+                       goto err;
+               }
+
+       }
+
+       ret = __lookup_inode(trans, BCACHEFS_ROOT_INO, &root_inode, &snapshot);
+       if (ret && ret != -ENOENT)
+               return ret;
+
+       if (mustfix_fsck_err_on(ret, c, "root directory missing") ||
+           mustfix_fsck_err_on(!S_ISDIR(root_inode.bi_mode), c,
+                               "root inode not a directory")) {
+               bch2_inode_init(c, &root_inode, 0, 0, S_IFDIR|0755,
+                               0, NULL);
+               root_inode.bi_inum = inum;
+
+               ret = __write_inode(trans, &root_inode, snapshot);
+               if (ret)
+                       bch_err(c, "error writing root inode: %i", ret);
+       }
+err:
 fsck_err:
        return ret;
-create_root:
-       bch2_inode_init(c, root_inode, 0, 0, S_IFDIR|0755,
-                       0, NULL);
-       root_inode->bi_inum = BCACHEFS_ROOT_INO;
+}
 
-       bch2_inode_pack(c, &packed, root_inode);
+/* Get root directory, create if it doesn't exist: */
+noinline_for_stack
+static int check_root(struct bch_fs *c)
+{
+       bch_verbose(c, "checking root directory");
 
-       return bch2_btree_insert(c, BTREE_ID_inodes, &packed.inode.k_i,
-                                NULL, NULL,
-                                BTREE_INSERT_NOFAIL|
-                                BTREE_INSERT_LAZY_RW);
+       return bch2_trans_do(c, NULL, NULL,
+                            BTREE_INSERT_NOFAIL|
+                            BTREE_INSERT_LAZY_RW,
+               check_root_trans(&trans));
 }
 
 struct pathbuf {
@@ -1009,10 +1800,24 @@ struct pathbuf {
 
        struct pathbuf_entry {
                u64     inum;
+               u32     snapshot;
        }               *entries;
 };
 
-static int path_down(struct pathbuf *p, u64 inum)
+static bool path_is_dup(struct pathbuf *p, u64 inum, u32 snapshot)
+{
+       struct pathbuf_entry *i;
+
+       for (i = p->entries; i < p->entries + p->nr; i++)
+               if (i->inum     == inum &&
+                   i->snapshot == snapshot)
+                       return true;
+
+       return false;
+}
+
+static int path_down(struct bch_fs *c, struct pathbuf *p,
+                    u64 inum, u32 snapshot)
 {
        if (p->nr == p->size) {
                size_t new_size = max_t(size_t, 256UL, p->size * 2);
@@ -1020,6 +1825,8 @@ static int path_down(struct pathbuf *p, u64 inum)
                                   new_size * sizeof(p->entries[0]),
                                   GFP_KERNEL);
                if (!n) {
+                       bch_err(c, "fsck: error allocating memory for pathbuf, size %zu",
+                               new_size);
                        return -ENOMEM;
                }
 
@@ -1028,73 +1835,109 @@ static int path_down(struct pathbuf *p, u64 inum)
        };
 
        p->entries[p->nr++] = (struct pathbuf_entry) {
-               .inum = inum,
+               .inum           = inum,
+               .snapshot       = snapshot,
        };
        return 0;
 }
 
+/*
+ * Check that a given inode is reachable from the root:
+ *
+ * XXX: we should also be verifying that inodes are in the right subvolumes
+ */
 static int check_path(struct btree_trans *trans,
                      struct pathbuf *p,
-                     struct bch_inode_unpacked *inode)
+                     struct bch_inode_unpacked *inode,
+                     u32 snapshot)
 {
        struct bch_fs *c = trans->c;
-       u32 snapshot;
-       size_t i;
        int ret = 0;
 
+       snapshot = snapshot_t(c, snapshot)->equiv;
        p->nr = 0;
 
-       while (inode->bi_inum != BCACHEFS_ROOT_INO) {
+       while (!(inode->bi_inum == BCACHEFS_ROOT_INO &&
+                inode->bi_subvol == BCACHEFS_ROOT_SUBVOL)) {
+               struct btree_iter dirent_iter;
+               struct bkey_s_c_dirent d;
+               u32 parent_snapshot = snapshot;
+
+               if (inode->bi_subvol) {
+                       u64 inum;
+
+                       ret = subvol_lookup(trans, inode->bi_parent_subvol,
+                                           &parent_snapshot, &inum);
+                       if (ret)
+                               break;
+               }
+
                ret = lockrestart_do(trans,
-                       inode_backpointer_exists(trans, inode));
-               if (ret < 0)
+                       PTR_ERR_OR_ZERO((d = dirent_get_by_pos(trans, &dirent_iter,
+                                         SPOS(inode->bi_dir, inode->bi_dir_offset,
+                                              parent_snapshot))).k));
+               if (ret && ret != -ENOENT)
                        break;
 
-               if (!ret) {
-                       if (fsck_err(c,  "unreachable inode %llu, type %u nlink %u backptr %llu:%llu",
-                                    inode->bi_inum,
-                                    mode_to_type(inode->bi_mode),
+               if (!ret && !dirent_points_to_inode(d, inode)) {
+                       bch2_trans_iter_exit(trans, &dirent_iter);
+                       ret = -ENOENT;
+               }
+
+               if (ret == -ENOENT) {
+                       if (fsck_err(c,  "unreachable inode %llu:%u, type %s nlink %u backptr %llu:%llu",
+                                    inode->bi_inum, snapshot,
+                                    bch2_d_type_str(inode_d_type(inode)),
                                     inode->bi_nlink,
                                     inode->bi_dir,
                                     inode->bi_dir_offset))
-                               ret = reattach_inode(trans, inode);
+                               ret = reattach_inode(trans, inode, snapshot);
                        break;
                }
-               ret = 0;
+
+               bch2_trans_iter_exit(trans, &dirent_iter);
 
                if (!S_ISDIR(inode->bi_mode))
                        break;
 
-               ret = path_down(p, inode->bi_inum);
+               ret = path_down(c, p, inode->bi_inum, snapshot);
                if (ret) {
                        bch_err(c, "memory allocation failure");
                        return ret;
                }
 
-               for (i = 0; i < p->nr; i++) {
-                       if (inode->bi_dir != p->entries[i].inum)
-                               continue;
+               snapshot = parent_snapshot;
+
+               ret = lookup_inode(trans, inode->bi_dir, inode, &snapshot);
+               if (ret) {
+                       /* Should have been caught in dirents pass */
+                       bch_err(c, "error looking up parent directory: %i", ret);
+                       break;
+               }
+
+               if (path_is_dup(p, inode->bi_inum, snapshot)) {
+                       struct pathbuf_entry *i;
 
                        /* XXX print path */
+                       bch_err(c, "directory structure loop");
+
+                       for (i = p->entries; i < p->entries + p->nr; i++)
+                               pr_err("%llu:%u", i->inum, i->snapshot);
+                       pr_err("%llu:%u", inode->bi_inum, snapshot);
+
                        if (!fsck_err(c, "directory structure loop"))
                                return 0;
 
-                       ret = lockrestart_do(trans,
-                                        remove_backpointer(trans, inode));
+                       ret = __bch2_trans_do(trans, NULL, NULL,
+                                             BTREE_INSERT_NOFAIL|
+                                             BTREE_INSERT_LAZY_RW,
+                                       remove_backpointer(trans, inode));
                        if (ret) {
                                bch_err(c, "error removing dirent: %i", ret);
                                break;
                        }
 
-                       ret = reattach_inode(trans, inode);
-                       break;
-               }
-
-               ret = lookup_inode(trans, inode->bi_dir, inode, &snapshot);
-               if (ret) {
-                       /* Should have been caught in dirents pass */
-                       bch_err(c, "error looking up parent directory: %i", ret);
-                       break;
+                       ret = reattach_inode(trans, inode, snapshot);
                }
        }
 fsck_err:
@@ -1108,10 +1951,11 @@ fsck_err:
  * After check_dirents(), if an inode backpointer doesn't exist that means it's
  * unreachable:
  */
+noinline_for_stack
 static int check_directory_structure(struct bch_fs *c)
 {
        struct btree_trans trans;
-       struct btree_iter *iter;
+       struct btree_iter iter;
        struct bkey_s_c k;
        struct bch_inode_unpacked u;
        struct pathbuf path = { 0, 0, NULL };
@@ -1121,28 +1965,33 @@ static int check_directory_structure(struct bch_fs *c)
 
        for_each_btree_key(&trans, iter, BTREE_ID_inodes, POS_MIN,
                           BTREE_ITER_INTENT|
-                          BTREE_ITER_PREFETCH, k, ret) {
-               if (k.k->type != KEY_TYPE_inode)
+                          BTREE_ITER_PREFETCH|
+                          BTREE_ITER_ALL_SNAPSHOTS, k, ret) {
+               if (!bkey_is_inode(k.k))
                        continue;
 
-               ret = bch2_inode_unpack(bkey_s_c_to_inode(k), &u);
+               ret = bch2_inode_unpack(k, &u);
                if (ret) {
                        /* Should have been caught earlier in fsck: */
                        bch_err(c, "error unpacking inode %llu: %i", k.k->p.offset, ret);
                        break;
                }
 
-               ret = check_path(&trans, &path, &u);
+               if (u.bi_flags & BCH_INODE_UNLINKED)
+                       continue;
+
+               ret = check_path(&trans, &path, &u, iter.pos.snapshot);
                if (ret)
                        break;
        }
-       bch2_trans_iter_put(&trans, iter);
+       bch2_trans_iter_exit(&trans, &iter);
 
        BUG_ON(ret == -EINTR);
 
        kfree(path.entries);
 
-       return bch2_trans_exit(&trans) ?: ret;
+       bch2_trans_exit(&trans);
+       return ret;
 }
 
 struct nlink_table {
@@ -1156,12 +2005,15 @@ struct nlink_table {
        }               *d;
 };
 
-static int add_nlink(struct nlink_table *t, u64 inum, u32 snapshot)
+static int add_nlink(struct bch_fs *c, struct nlink_table *t,
+                    u64 inum, u32 snapshot)
 {
        if (t->nr == t->size) {
                size_t new_size = max_t(size_t, 128UL, t->size * 2);
                void *d = kvmalloc(new_size * sizeof(t->d[0]), GFP_KERNEL);
                if (!d) {
+                       bch_err(c, "fsck: error allocating memory for nlink_table, size %zu",
+                               new_size);
                        return -ENOMEM;
                }
 
@@ -1190,8 +2042,9 @@ static int nlink_cmp(const void *_l, const void *_r)
        return cmp_int(l->inum, r->inum) ?: cmp_int(l->snapshot, r->snapshot);
 }
 
-static void inc_link(struct bch_fs *c, struct nlink_table *links,
-                    u64 range_start, u64 range_end, u64 inum)
+static void inc_link(struct bch_fs *c, struct snapshots_seen *s,
+                    struct nlink_table *links,
+                    u64 range_start, u64 range_end, u64 inum, u32 snapshot)
 {
        struct nlink *link, key = {
                .inum = inum, .snapshot = U32_MAX,
@@ -1202,8 +2055,18 @@ static void inc_link(struct bch_fs *c, struct nlink_table *links,
 
        link = __inline_bsearch(&key, links->d, links->nr,
                                sizeof(links->d[0]), nlink_cmp);
-       if (link)
-               link->count++;
+       if (!link)
+               return;
+
+       while (link > links->d && link[0].inum == link[-1].inum)
+               --link;
+
+       for (; link < links->d + links->nr && link->inum == inum; link++)
+               if (ref_visible(c, s, snapshot, link->snapshot)) {
+                       link->count++;
+                       if (link->snapshot >= snapshot)
+                               break;
+               }
 }
 
 noinline_for_stack
@@ -1212,9 +2075,8 @@ static int check_nlinks_find_hardlinks(struct bch_fs *c,
                                       u64 start, u64 *end)
 {
        struct btree_trans trans;
-       struct btree_iter *iter;
+       struct btree_iter iter;
        struct bkey_s_c k;
-       struct bkey_s_c_inode inode;
        struct bch_inode_unpacked u;
        int ret = 0;
 
@@ -1223,26 +2085,25 @@ static int check_nlinks_find_hardlinks(struct bch_fs *c,
        for_each_btree_key(&trans, iter, BTREE_ID_inodes,
                           POS(0, start),
                           BTREE_ITER_INTENT|
-                          BTREE_ITER_PREFETCH, k, ret) {
-               if (k.k->type != KEY_TYPE_inode)
+                          BTREE_ITER_PREFETCH|
+                          BTREE_ITER_ALL_SNAPSHOTS, k, ret) {
+               if (!bkey_is_inode(k.k))
                        continue;
 
-               inode = bkey_s_c_to_inode(k);
+               /* Should never fail, checked by bch2_inode_invalid: */
+               BUG_ON(bch2_inode_unpack(k, &u));
 
                /*
                 * Backpointer and directory structure checks are sufficient for
                 * directories, since they can't have hardlinks:
                 */
-               if (S_ISDIR(le16_to_cpu(inode.v->bi_mode)))
+               if (S_ISDIR(le16_to_cpu(u.bi_mode)))
                        continue;
 
-               /* Should never fail, checked by bch2_inode_invalid: */
-               BUG_ON(bch2_inode_unpack(inode, &u));
-
                if (!u.bi_nlink)
                        continue;
 
-               ret = add_nlink(t, k.k->p.offset, k.k->p.snapshot);
+               ret = add_nlink(c, t, k.k->p.offset, k.k->p.snapshot);
                if (ret) {
                        *end = k.k->p.offset;
                        ret = 0;
@@ -1250,7 +2111,7 @@ static int check_nlinks_find_hardlinks(struct bch_fs *c,
                }
 
        }
-       bch2_trans_iter_put(&trans, iter);
+       bch2_trans_iter_exit(&trans, &iter);
        bch2_trans_exit(&trans);
 
        if (ret)
@@ -1264,34 +2125,43 @@ static int check_nlinks_walk_dirents(struct bch_fs *c, struct nlink_table *links
                                     u64 range_start, u64 range_end)
 {
        struct btree_trans trans;
-       struct btree_iter *iter;
+       struct snapshots_seen s;
+       struct btree_iter iter;
        struct bkey_s_c k;
        struct bkey_s_c_dirent d;
        int ret;
 
+       snapshots_seen_init(&s);
+
        bch2_trans_init(&trans, c, BTREE_ITER_MAX, 0);
 
        for_each_btree_key(&trans, iter, BTREE_ID_dirents, POS_MIN,
                           BTREE_ITER_INTENT|
-                          BTREE_ITER_PREFETCH, k, ret) {
+                          BTREE_ITER_PREFETCH|
+                          BTREE_ITER_ALL_SNAPSHOTS, k, ret) {
+               ret = snapshots_seen_update(c, &s, k.k->p);
+               if (ret)
+                       break;
+
                switch (k.k->type) {
                case KEY_TYPE_dirent:
                        d = bkey_s_c_to_dirent(k);
 
-                       if (d.v->d_type != DT_DIR)
-                               inc_link(c, links, range_start, range_end,
-                                        le64_to_cpu(d.v->d_inum));
+                       if (d.v->d_type != DT_DIR &&
+                           d.v->d_type != DT_SUBVOL)
+                               inc_link(c, &s, links, range_start, range_end,
+                                        le64_to_cpu(d.v->d_inum),
+                                        d.k->p.snapshot);
                        break;
                }
-
-               bch2_trans_cond_resched(&trans);
        }
-       bch2_trans_iter_put(&trans, iter);
+       bch2_trans_iter_exit(&trans, &iter);
 
-       ret = bch2_trans_exit(&trans) ?: ret;
        if (ret)
                bch_err(c, "error in fsck: btree error %i while walking dirents", ret);
 
+       bch2_trans_exit(&trans);
+       snapshots_seen_exit(&s);
        return ret;
 }
 
@@ -1301,9 +2171,8 @@ static int check_nlinks_update_hardlinks(struct bch_fs *c,
                               u64 range_start, u64 range_end)
 {
        struct btree_trans trans;
-       struct btree_iter *iter;
+       struct btree_iter iter;
        struct bkey_s_c k;
-       struct bkey_s_c_inode inode;
        struct bch_inode_unpacked u;
        struct nlink *link = links->d;
        int ret = 0;
@@ -1313,23 +2182,24 @@ static int check_nlinks_update_hardlinks(struct bch_fs *c,
        for_each_btree_key(&trans, iter, BTREE_ID_inodes,
                           POS(0, range_start),
                           BTREE_ITER_INTENT|
-                          BTREE_ITER_PREFETCH, k, ret) {
+                          BTREE_ITER_PREFETCH|
+                          BTREE_ITER_ALL_SNAPSHOTS, k, ret) {
                if (k.k->p.offset >= range_end)
                        break;
 
-               if (k.k->type != KEY_TYPE_inode)
+               if (!bkey_is_inode(k.k))
                        continue;
 
-               inode = bkey_s_c_to_inode(k);
-               if (S_ISDIR(le16_to_cpu(inode.v->bi_mode)))
-                       continue;
+               BUG_ON(bch2_inode_unpack(k, &u));
 
-               BUG_ON(bch2_inode_unpack(inode, &u));
+               if (S_ISDIR(le16_to_cpu(u.bi_mode)))
+                       continue;
 
                if (!u.bi_nlink)
                        continue;
 
-               while (link->inum < k.k->p.offset) {
+               while ((cmp_int(link->inum, k.k->p.offset) ?:
+                       cmp_int(link->snapshot, k.k->p.snapshot)) < 0) {
                        link++;
                        BUG_ON(link >= links->d + links->nr);
                }
@@ -1340,17 +2210,13 @@ static int check_nlinks_update_hardlinks(struct bch_fs *c,
                                bch2_inode_nlink_get(&u), link->count)) {
                        bch2_inode_nlink_set(&u, link->count);
 
-                       ret = __bch2_trans_do(&trans, NULL, NULL,
-                                             BTREE_INSERT_NOFAIL|
-                                             BTREE_INSERT_LAZY_RW,
-                                             bch2_btree_iter_traverse(iter) ?:
-                                       bch2_inode_write(&trans, iter, &u));
+                       ret = write_inode(&trans, &u, k.k->p.snapshot);
                        if (ret)
                                bch_err(c, "error in fsck: error %i updating inode", ret);
                }
        }
 fsck_err:
-       bch2_trans_iter_put(&trans, iter);
+       bch2_trans_iter_exit(&trans, &iter);
        bch2_trans_exit(&trans);
 
        if (ret)
@@ -1396,21 +2262,91 @@ static int check_nlinks(struct bch_fs *c)
        return ret;
 }
 
+static int fix_reflink_p_key(struct btree_trans *trans, struct btree_iter *iter)
+{
+       struct bkey_s_c k;
+       struct bkey_s_c_reflink_p p;
+       struct bkey_i_reflink_p *u;
+       int ret;
+
+       k = bch2_btree_iter_peek(iter);
+       if (!k.k)
+               return 0;
+
+       ret = bkey_err(k);
+       if (ret)
+               return ret;
+
+       if (k.k->type != KEY_TYPE_reflink_p)
+               return 0;
+
+       p = bkey_s_c_to_reflink_p(k);
+
+       if (!p.v->front_pad && !p.v->back_pad)
+               return 0;
+
+       u = bch2_trans_kmalloc(trans, sizeof(*u));
+       ret = PTR_ERR_OR_ZERO(u);
+       if (ret)
+               return ret;
+
+       bkey_reassemble(&u->k_i, k);
+       u->v.front_pad  = 0;
+       u->v.back_pad   = 0;
+
+       return bch2_trans_update(trans, iter, &u->k_i, BTREE_TRIGGER_NORUN);
+}
+
+noinline_for_stack
+static int fix_reflink_p(struct bch_fs *c)
+{
+       struct btree_trans trans;
+       struct btree_iter iter;
+       struct bkey_s_c k;
+       int ret;
+
+       if (c->sb.version >= bcachefs_metadata_version_reflink_p_fix)
+               return 0;
+
+       bch_verbose(c, "fixing reflink_p keys");
+
+       bch2_trans_init(&trans, c, BTREE_ITER_MAX, 0);
+
+       for_each_btree_key(&trans, iter, BTREE_ID_extents, POS_MIN,
+                          BTREE_ITER_INTENT|
+                          BTREE_ITER_PREFETCH|
+                          BTREE_ITER_ALL_SNAPSHOTS, k, ret) {
+               if (k.k->type == KEY_TYPE_reflink_p) {
+                       ret = __bch2_trans_do(&trans, NULL, NULL,
+                                             BTREE_INSERT_NOFAIL|
+                                             BTREE_INSERT_LAZY_RW,
+                                             fix_reflink_p_key(&trans, &iter));
+                       if (ret)
+                               break;
+               }
+       }
+       bch2_trans_iter_exit(&trans, &iter);
+
+       bch2_trans_exit(&trans);
+       return ret;
+}
+
 /*
  * Checks for inconsistencies that shouldn't happen, unless we have a bug.
  * Doesn't fix them yet, mainly because they haven't yet been observed:
  */
 int bch2_fsck_full(struct bch_fs *c)
 {
-       struct bch_inode_unpacked root_inode;
-
-       return  check_inodes(c, true) ?:
+       return  bch2_fs_snapshots_check(c) ?:
+               check_inodes(c, true) ?:
+               check_subvols(c) ?:
                check_extents(c) ?:
                check_dirents(c) ?:
                check_xattrs(c) ?:
-               check_root(c, &root_inode) ?:
+               check_root(c) ?:
                check_directory_structure(c) ?:
-               check_nlinks(c);
+               check_nlinks(c) ?:
+               fix_reflink_p(c);
 }
 
 int bch2_fsck_walk_inodes_only(struct bch_fs *c)