]> git.sesse.net Git - bcachefs-tools-debian/blobdiff - libbcachefs/recovery.c
cmd_set_passphrase: revoke the invalidated key
[bcachefs-tools-debian] / libbcachefs / recovery.c
index 63b385d8886a7ba8e360669f70bc495071ba6afb..30efb3c9056009f930bbe0da6b9fde6cd0255c07 100644 (file)
@@ -5,6 +5,7 @@
 #include "bkey_buf.h"
 #include "alloc_background.h"
 #include "btree_gc.h"
+#include "btree_journal_iter.h"
 #include "btree_update.h"
 #include "btree_update_interior.h"
 #include "btree_io.h"
@@ -23,6 +24,8 @@
 #include "quota.h"
 #include "recovery.h"
 #include "replicas.h"
+#include "sb-clean.h"
+#include "snapshot.h"
 #include "subvolume.h"
 #include "super-io.h"
 
@@ -57,524 +60,6 @@ static void zero_out_btree_mem_ptr(struct journal_keys *keys)
                        bkey_i_to_btree_ptr_v2(i->k)->v.mem_ptr = 0;
 }
 
-/* iterate over keys read from the journal: */
-
-static int __journal_key_cmp(enum btree_id     l_btree_id,
-                            unsigned           l_level,
-                            struct bpos        l_pos,
-                            const struct journal_key *r)
-{
-       return (cmp_int(l_btree_id,     r->btree_id) ?:
-               cmp_int(l_level,        r->level) ?:
-               bpos_cmp(l_pos, r->k->k.p));
-}
-
-static int journal_key_cmp(const struct journal_key *l, const struct journal_key *r)
-{
-       return __journal_key_cmp(l->btree_id, l->level, l->k->k.p, r);
-}
-
-static inline size_t idx_to_pos(struct journal_keys *keys, size_t idx)
-{
-       size_t gap_size = keys->size - keys->nr;
-
-       if (idx >= keys->gap)
-               idx += gap_size;
-       return idx;
-}
-
-static inline struct journal_key *idx_to_key(struct journal_keys *keys, size_t idx)
-{
-       return keys->d + idx_to_pos(keys, idx);
-}
-
-static size_t __bch2_journal_key_search(struct journal_keys *keys,
-                                       enum btree_id id, unsigned level,
-                                       struct bpos pos)
-{
-       size_t l = 0, r = keys->nr, m;
-
-       while (l < r) {
-               m = l + ((r - l) >> 1);
-               if (__journal_key_cmp(id, level, pos, idx_to_key(keys, m)) > 0)
-                       l = m + 1;
-               else
-                       r = m;
-       }
-
-       BUG_ON(l < keys->nr &&
-              __journal_key_cmp(id, level, pos, idx_to_key(keys, l)) > 0);
-
-       BUG_ON(l &&
-              __journal_key_cmp(id, level, pos, idx_to_key(keys, l - 1)) <= 0);
-
-       return l;
-}
-
-static size_t bch2_journal_key_search(struct journal_keys *keys,
-                                     enum btree_id id, unsigned level,
-                                     struct bpos pos)
-{
-       return idx_to_pos(keys, __bch2_journal_key_search(keys, id, level, pos));
-}
-
-struct bkey_i *bch2_journal_keys_peek_upto(struct bch_fs *c, enum btree_id btree_id,
-                                          unsigned level, struct bpos pos,
-                                          struct bpos end_pos, size_t *idx)
-{
-       struct journal_keys *keys = &c->journal_keys;
-       unsigned iters = 0;
-       struct journal_key *k;
-search:
-       if (!*idx)
-               *idx = __bch2_journal_key_search(keys, btree_id, level, pos);
-
-       while ((k = *idx < keys->nr ? idx_to_key(keys, *idx) : NULL)) {
-               if (__journal_key_cmp(btree_id, level, end_pos, k) < 0)
-                       return NULL;
-
-               if (__journal_key_cmp(btree_id, level, pos, k) <= 0 &&
-                   !k->overwritten)
-                       return k->k;
-
-               (*idx)++;
-               iters++;
-               if (iters == 10) {
-                       *idx = 0;
-                       goto search;
-               }
-       }
-
-       return NULL;
-}
-
-struct bkey_i *bch2_journal_keys_peek_slot(struct bch_fs *c, enum btree_id btree_id,
-                                          unsigned level, struct bpos pos)
-{
-       size_t idx = 0;
-
-       return bch2_journal_keys_peek_upto(c, btree_id, level, pos, pos, &idx);
-}
-
-static void journal_iters_fix(struct bch_fs *c)
-{
-       struct journal_keys *keys = &c->journal_keys;
-       /* The key we just inserted is immediately before the gap: */
-       size_t gap_end = keys->gap + (keys->size - keys->nr);
-       struct btree_and_journal_iter *iter;
-
-       /*
-        * If an iterator points one after the key we just inserted, decrement
-        * the iterator so it points at the key we just inserted - if the
-        * decrement was unnecessary, bch2_btree_and_journal_iter_peek() will
-        * handle that:
-        */
-       list_for_each_entry(iter, &c->journal_iters, journal.list)
-               if (iter->journal.idx == gap_end)
-                       iter->journal.idx = keys->gap - 1;
-}
-
-static void journal_iters_move_gap(struct bch_fs *c, size_t old_gap, size_t new_gap)
-{
-       struct journal_keys *keys = &c->journal_keys;
-       struct journal_iter *iter;
-       size_t gap_size = keys->size - keys->nr;
-
-       list_for_each_entry(iter, &c->journal_iters, list) {
-               if (iter->idx > old_gap)
-                       iter->idx -= gap_size;
-               if (iter->idx >= new_gap)
-                       iter->idx += gap_size;
-       }
-}
-
-int bch2_journal_key_insert_take(struct bch_fs *c, enum btree_id id,
-                                unsigned level, struct bkey_i *k)
-{
-       struct journal_key n = {
-               .btree_id       = id,
-               .level          = level,
-               .k              = k,
-               .allocated      = true,
-               /*
-                * Ensure these keys are done last by journal replay, to unblock
-                * journal reclaim:
-                */
-               .journal_seq    = U32_MAX,
-       };
-       struct journal_keys *keys = &c->journal_keys;
-       size_t idx = bch2_journal_key_search(keys, id, level, k->k.p);
-
-       BUG_ON(test_bit(BCH_FS_RW, &c->flags));
-
-       if (idx < keys->size &&
-           journal_key_cmp(&n, &keys->d[idx]) == 0) {
-               if (keys->d[idx].allocated)
-                       kfree(keys->d[idx].k);
-               keys->d[idx] = n;
-               return 0;
-       }
-
-       if (idx > keys->gap)
-               idx -= keys->size - keys->nr;
-
-       if (keys->nr == keys->size) {
-               struct journal_keys new_keys = {
-                       .nr                     = keys->nr,
-                       .size                   = max_t(size_t, keys->size, 8) * 2,
-               };
-
-               new_keys.d = kvmalloc_array(new_keys.size, sizeof(new_keys.d[0]), GFP_KERNEL);
-               if (!new_keys.d) {
-                       bch_err(c, "%s: error allocating new key array (size %zu)",
-                               __func__, new_keys.size);
-                       return -BCH_ERR_ENOMEM_journal_key_insert;
-               }
-
-               /* Since @keys was full, there was no gap: */
-               memcpy(new_keys.d, keys->d, sizeof(keys->d[0]) * keys->nr);
-               kvfree(keys->d);
-               *keys = new_keys;
-
-               /* And now the gap is at the end: */
-               keys->gap = keys->nr;
-       }
-
-       journal_iters_move_gap(c, keys->gap, idx);
-
-       move_gap(keys->d, keys->nr, keys->size, keys->gap, idx);
-       keys->gap = idx;
-
-       keys->nr++;
-       keys->d[keys->gap++] = n;
-
-       journal_iters_fix(c);
-
-       return 0;
-}
-
-/*
- * Can only be used from the recovery thread while we're still RO - can't be
- * used once we've got RW, as journal_keys is at that point used by multiple
- * threads:
- */
-int bch2_journal_key_insert(struct bch_fs *c, enum btree_id id,
-                           unsigned level, struct bkey_i *k)
-{
-       struct bkey_i *n;
-       int ret;
-
-       n = kmalloc(bkey_bytes(&k->k), GFP_KERNEL);
-       if (!n)
-               return -BCH_ERR_ENOMEM_journal_key_insert;
-
-       bkey_copy(n, k);
-       ret = bch2_journal_key_insert_take(c, id, level, n);
-       if (ret)
-               kfree(n);
-       return ret;
-}
-
-int bch2_journal_key_delete(struct bch_fs *c, enum btree_id id,
-                           unsigned level, struct bpos pos)
-{
-       struct bkey_i whiteout;
-
-       bkey_init(&whiteout.k);
-       whiteout.k.p = pos;
-
-       return bch2_journal_key_insert(c, id, level, &whiteout);
-}
-
-void bch2_journal_key_overwritten(struct bch_fs *c, enum btree_id btree,
-                                 unsigned level, struct bpos pos)
-{
-       struct journal_keys *keys = &c->journal_keys;
-       size_t idx = bch2_journal_key_search(keys, btree, level, pos);
-
-       if (idx < keys->size &&
-           keys->d[idx].btree_id       == btree &&
-           keys->d[idx].level          == level &&
-           bpos_eq(keys->d[idx].k->k.p, pos))
-               keys->d[idx].overwritten = true;
-}
-
-static void bch2_journal_iter_advance(struct journal_iter *iter)
-{
-       if (iter->idx < iter->keys->size) {
-               iter->idx++;
-               if (iter->idx == iter->keys->gap)
-                       iter->idx += iter->keys->size - iter->keys->nr;
-       }
-}
-
-static struct bkey_s_c bch2_journal_iter_peek(struct journal_iter *iter)
-{
-       struct journal_key *k = iter->keys->d + iter->idx;
-
-       while (k < iter->keys->d + iter->keys->size &&
-              k->btree_id      == iter->btree_id &&
-              k->level         == iter->level) {
-               if (!k->overwritten)
-                       return bkey_i_to_s_c(k->k);
-
-               bch2_journal_iter_advance(iter);
-               k = iter->keys->d + iter->idx;
-       }
-
-       return bkey_s_c_null;
-}
-
-static void bch2_journal_iter_exit(struct journal_iter *iter)
-{
-       list_del(&iter->list);
-}
-
-static void bch2_journal_iter_init(struct bch_fs *c,
-                                  struct journal_iter *iter,
-                                  enum btree_id id, unsigned level,
-                                  struct bpos pos)
-{
-       iter->btree_id  = id;
-       iter->level     = level;
-       iter->keys      = &c->journal_keys;
-       iter->idx       = bch2_journal_key_search(&c->journal_keys, id, level, pos);
-}
-
-static struct bkey_s_c bch2_journal_iter_peek_btree(struct btree_and_journal_iter *iter)
-{
-       return bch2_btree_node_iter_peek_unpack(&iter->node_iter,
-                                               iter->b, &iter->unpacked);
-}
-
-static void bch2_journal_iter_advance_btree(struct btree_and_journal_iter *iter)
-{
-       bch2_btree_node_iter_advance(&iter->node_iter, iter->b);
-}
-
-void bch2_btree_and_journal_iter_advance(struct btree_and_journal_iter *iter)
-{
-       if (bpos_eq(iter->pos, SPOS_MAX))
-               iter->at_end = true;
-       else
-               iter->pos = bpos_successor(iter->pos);
-}
-
-struct bkey_s_c bch2_btree_and_journal_iter_peek(struct btree_and_journal_iter *iter)
-{
-       struct bkey_s_c btree_k, journal_k, ret;
-again:
-       if (iter->at_end)
-               return bkey_s_c_null;
-
-       while ((btree_k = bch2_journal_iter_peek_btree(iter)).k &&
-              bpos_lt(btree_k.k->p, iter->pos))
-               bch2_journal_iter_advance_btree(iter);
-
-       while ((journal_k = bch2_journal_iter_peek(&iter->journal)).k &&
-              bpos_lt(journal_k.k->p, iter->pos))
-               bch2_journal_iter_advance(&iter->journal);
-
-       ret = journal_k.k &&
-               (!btree_k.k || bpos_le(journal_k.k->p, btree_k.k->p))
-               ? journal_k
-               : btree_k;
-
-       if (ret.k && iter->b && bpos_gt(ret.k->p, iter->b->data->max_key))
-               ret = bkey_s_c_null;
-
-       if (ret.k) {
-               iter->pos = ret.k->p;
-               if (bkey_deleted(ret.k)) {
-                       bch2_btree_and_journal_iter_advance(iter);
-                       goto again;
-               }
-       } else {
-               iter->pos = SPOS_MAX;
-               iter->at_end = true;
-       }
-
-       return ret;
-}
-
-void bch2_btree_and_journal_iter_exit(struct btree_and_journal_iter *iter)
-{
-       bch2_journal_iter_exit(&iter->journal);
-}
-
-void __bch2_btree_and_journal_iter_init_node_iter(struct btree_and_journal_iter *iter,
-                                                 struct bch_fs *c,
-                                                 struct btree *b,
-                                                 struct btree_node_iter node_iter,
-                                                 struct bpos pos)
-{
-       memset(iter, 0, sizeof(*iter));
-
-       iter->b = b;
-       iter->node_iter = node_iter;
-       bch2_journal_iter_init(c, &iter->journal, b->c.btree_id, b->c.level, pos);
-       INIT_LIST_HEAD(&iter->journal.list);
-       iter->pos = b->data->min_key;
-       iter->at_end = false;
-}
-
-/*
- * this version is used by btree_gc before filesystem has gone RW and
- * multithreaded, so uses the journal_iters list:
- */
-void bch2_btree_and_journal_iter_init_node_iter(struct btree_and_journal_iter *iter,
-                                               struct bch_fs *c,
-                                               struct btree *b)
-{
-       struct btree_node_iter node_iter;
-
-       bch2_btree_node_iter_init_from_start(&node_iter, b);
-       __bch2_btree_and_journal_iter_init_node_iter(iter, c, b, node_iter, b->data->min_key);
-       list_add(&iter->journal.list, &c->journal_iters);
-}
-
-/* sort and dedup all keys in the journal: */
-
-void bch2_journal_entries_free(struct bch_fs *c)
-{
-       struct journal_replay **i;
-       struct genradix_iter iter;
-
-       genradix_for_each(&c->journal_entries, iter, i)
-               if (*i)
-                       kvpfree(*i, offsetof(struct journal_replay, j) +
-                               vstruct_bytes(&(*i)->j));
-       genradix_free(&c->journal_entries);
-}
-
-/*
- * When keys compare equal, oldest compares first:
- */
-static int journal_sort_key_cmp(const void *_l, const void *_r)
-{
-       const struct journal_key *l = _l;
-       const struct journal_key *r = _r;
-
-       return  journal_key_cmp(l, r) ?:
-               cmp_int(l->journal_seq, r->journal_seq) ?:
-               cmp_int(l->journal_offset, r->journal_offset);
-}
-
-void bch2_journal_keys_free(struct journal_keys *keys)
-{
-       struct journal_key *i;
-
-       move_gap(keys->d, keys->nr, keys->size, keys->gap, keys->nr);
-       keys->gap = keys->nr;
-
-       for (i = keys->d; i < keys->d + keys->nr; i++)
-               if (i->allocated)
-                       kfree(i->k);
-
-       kvfree(keys->d);
-       keys->d = NULL;
-       keys->nr = keys->gap = keys->size = 0;
-}
-
-static void __journal_keys_sort(struct journal_keys *keys)
-{
-       struct journal_key *src, *dst;
-
-       sort(keys->d, keys->nr, sizeof(keys->d[0]), journal_sort_key_cmp, NULL);
-
-       src = dst = keys->d;
-       while (src < keys->d + keys->nr) {
-               while (src + 1 < keys->d + keys->nr &&
-                      src[0].btree_id  == src[1].btree_id &&
-                      src[0].level     == src[1].level &&
-                      bpos_eq(src[0].k->k.p, src[1].k->k.p))
-                       src++;
-
-               *dst++ = *src++;
-       }
-
-       keys->nr = dst - keys->d;
-}
-
-static int journal_keys_sort(struct bch_fs *c)
-{
-       struct genradix_iter iter;
-       struct journal_replay *i, **_i;
-       struct jset_entry *entry;
-       struct bkey_i *k;
-       struct journal_keys *keys = &c->journal_keys;
-       size_t nr_keys = 0, nr_read = 0;
-
-       genradix_for_each(&c->journal_entries, iter, _i) {
-               i = *_i;
-
-               if (!i || i->ignore)
-                       continue;
-
-               for_each_jset_key(k, entry, &i->j)
-                       nr_keys++;
-       }
-
-       if (!nr_keys)
-               return 0;
-
-       keys->size = roundup_pow_of_two(nr_keys);
-
-       keys->d = kvmalloc_array(keys->size, sizeof(keys->d[0]), GFP_KERNEL);
-       if (!keys->d) {
-               bch_err(c, "Failed to allocate buffer for sorted journal keys (%zu keys); trying slowpath",
-                       nr_keys);
-
-               do {
-                       keys->size >>= 1;
-                       keys->d = kvmalloc_array(keys->size, sizeof(keys->d[0]), GFP_KERNEL);
-               } while (!keys->d && keys->size > nr_keys / 8);
-
-               if (!keys->d) {
-                       bch_err(c, "Failed to allocate %zu size buffer for sorted journal keys; exiting",
-                               keys->size);
-                       return -BCH_ERR_ENOMEM_journal_keys_sort;
-               }
-       }
-
-       genradix_for_each(&c->journal_entries, iter, _i) {
-               i = *_i;
-
-               if (!i || i->ignore)
-                       continue;
-
-               cond_resched();
-
-               for_each_jset_key(k, entry, &i->j) {
-                       if (keys->nr == keys->size) {
-                               __journal_keys_sort(keys);
-
-                               if (keys->nr > keys->size * 7 / 8) {
-                                       bch_err(c, "Too many journal keys for slowpath; have %zu compacted, buf size %zu, processed %zu/%zu",
-                                               keys->nr, keys->size, nr_read, nr_keys);
-                                       return -BCH_ERR_ENOMEM_journal_keys_sort;
-                               }
-                       }
-
-                       keys->d[keys->nr++] = (struct journal_key) {
-                               .btree_id       = entry->btree_id,
-                               .level          = entry->level,
-                               .k              = k,
-                               .journal_seq    = le64_to_cpu(i->j.seq),
-                               .journal_offset = k->_data - i->j._data,
-                       };
-
-                       nr_read++;
-               }
-       }
-
-       __journal_keys_sort(keys);
-       keys->gap = keys->nr;
-
-       bch_verbose(c, "Journal keys: %zu read, %zu after sorting and compacting", nr_keys, keys->nr);
-       return 0;
-}
-
 /* journal replay: */
 
 static void replay_now_at(struct journal *j, u64 seq)
@@ -648,7 +133,7 @@ static int bch2_journal_replay(struct bch_fs *c)
        move_gap(keys->d, keys->nr, keys->size, keys->gap, keys->nr);
        keys->gap = keys->nr;
 
-       keys_sorted = kvmalloc_array(sizeof(*keys_sorted), keys->nr, GFP_KERNEL);
+       keys_sorted = kvmalloc_array(keys->nr, sizeof(*keys_sorted), GFP_KERNEL);
        if (!keys_sorted)
                return -BCH_ERR_ENOMEM_journal_replay;
 
@@ -846,134 +331,6 @@ static int journal_replay_early(struct bch_fs *c,
 
 /* sb clean section: */
 
-static struct bkey_i *btree_root_find(struct bch_fs *c,
-                                     struct bch_sb_field_clean *clean,
-                                     struct jset *j,
-                                     enum btree_id id, unsigned *level)
-{
-       struct bkey_i *k;
-       struct jset_entry *entry, *start, *end;
-
-       if (clean) {
-               start = clean->start;
-               end = vstruct_end(&clean->field);
-       } else {
-               start = j->start;
-               end = vstruct_last(j);
-       }
-
-       for (entry = start; entry < end; entry = vstruct_next(entry))
-               if (entry->type == BCH_JSET_ENTRY_btree_root &&
-                   entry->btree_id == id)
-                       goto found;
-
-       return NULL;
-found:
-       if (!entry->u64s)
-               return ERR_PTR(-EINVAL);
-
-       k = entry->start;
-       *level = entry->level;
-       return k;
-}
-
-static int verify_superblock_clean(struct bch_fs *c,
-                                  struct bch_sb_field_clean **cleanp,
-                                  struct jset *j)
-{
-       unsigned i;
-       struct bch_sb_field_clean *clean = *cleanp;
-       struct printbuf buf1 = PRINTBUF;
-       struct printbuf buf2 = PRINTBUF;
-       int ret = 0;
-
-       if (mustfix_fsck_err_on(j->seq != clean->journal_seq, c,
-                       "superblock journal seq (%llu) doesn't match journal (%llu) after clean shutdown",
-                       le64_to_cpu(clean->journal_seq),
-                       le64_to_cpu(j->seq))) {
-               kfree(clean);
-               *cleanp = NULL;
-               return 0;
-       }
-
-       for (i = 0; i < BTREE_ID_NR; i++) {
-               struct bkey_i *k1, *k2;
-               unsigned l1 = 0, l2 = 0;
-
-               k1 = btree_root_find(c, clean, NULL, i, &l1);
-               k2 = btree_root_find(c, NULL, j, i, &l2);
-
-               if (!k1 && !k2)
-                       continue;
-
-               printbuf_reset(&buf1);
-               printbuf_reset(&buf2);
-
-               if (k1)
-                       bch2_bkey_val_to_text(&buf1, c, bkey_i_to_s_c(k1));
-               else
-                       prt_printf(&buf1, "(none)");
-
-               if (k2)
-                       bch2_bkey_val_to_text(&buf2, c, bkey_i_to_s_c(k2));
-               else
-                       prt_printf(&buf2, "(none)");
-
-               mustfix_fsck_err_on(!k1 || !k2 ||
-                                   IS_ERR(k1) ||
-                                   IS_ERR(k2) ||
-                                   k1->k.u64s != k2->k.u64s ||
-                                   memcmp(k1, k2, bkey_bytes(&k1->k)) ||
-                                   l1 != l2, c,
-                       "superblock btree root %u doesn't match journal after clean shutdown\n"
-                       "sb:      l=%u %s\n"
-                       "journal: l=%u %s\n", i,
-                       l1, buf1.buf,
-                       l2, buf2.buf);
-       }
-fsck_err:
-       printbuf_exit(&buf2);
-       printbuf_exit(&buf1);
-       return ret;
-}
-
-static struct bch_sb_field_clean *read_superblock_clean(struct bch_fs *c)
-{
-       struct bch_sb_field_clean *clean, *sb_clean;
-       int ret;
-
-       mutex_lock(&c->sb_lock);
-       sb_clean = bch2_sb_get_clean(c->disk_sb.sb);
-
-       if (fsck_err_on(!sb_clean, c,
-                       "superblock marked clean but clean section not present")) {
-               SET_BCH_SB_CLEAN(c->disk_sb.sb, false);
-               c->sb.clean = false;
-               mutex_unlock(&c->sb_lock);
-               return NULL;
-       }
-
-       clean = kmemdup(sb_clean, vstruct_bytes(&sb_clean->field),
-                       GFP_KERNEL);
-       if (!clean) {
-               mutex_unlock(&c->sb_lock);
-               return ERR_PTR(-BCH_ERR_ENOMEM_read_superblock_clean);
-       }
-
-       ret = bch2_sb_clean_validate_late(c, clean, READ);
-       if (ret) {
-               mutex_unlock(&c->sb_lock);
-               return ERR_PTR(ret);
-       }
-
-       mutex_unlock(&c->sb_lock);
-
-       return clean;
-fsck_err:
-       mutex_unlock(&c->sb_lock);
-       return ERR_PTR(ret);
-}
-
 static bool btree_id_is_alloc(enum btree_id id)
 {
        switch (id) {
@@ -1120,9 +477,38 @@ static int bch2_fs_upgrade_for_subvolumes(struct bch_fs *c)
        return ret;
 }
 
+const char * const bch2_recovery_passes[] = {
+#define x(_fn, _when)  #_fn,
+       BCH_RECOVERY_PASSES()
+#undef x
+       NULL
+};
+
+static int bch2_check_allocations(struct bch_fs *c)
+{
+       return bch2_gc(c, true, c->opts.norecovery);
+}
+
+static int bch2_set_may_go_rw(struct bch_fs *c)
+{
+       set_bit(BCH_FS_MAY_GO_RW, &c->flags);
+       return 0;
+}
+
+struct recovery_pass_fn {
+       int             (*fn)(struct bch_fs *);
+       unsigned        when;
+};
+
+static struct recovery_pass_fn recovery_pass_fns[] = {
+#define x(_fn, _when)  { .fn = bch2_##_fn, .when = _when },
+       BCH_RECOVERY_PASSES()
+#undef x
+};
+
 static void check_version_upgrade(struct bch_fs *c)
 {
-       unsigned latest_compatible = bch2_version_compatible(c->sb.version);
+       unsigned latest_compatible = bch2_latest_compatible_version(c->sb.version);
        unsigned latest_version = bcachefs_metadata_version_current;
        unsigned old_version = c->sb.version_upgrade_complete ?: c->sb.version;
        unsigned new_version = 0;
@@ -1172,7 +558,12 @@ static void check_version_upgrade(struct bch_fs *c)
 
                recovery_passes = bch2_upgrade_recovery_passes(c, old_version, new_version);
                if (recovery_passes) {
-                       prt_str(&buf, "fsck required");
+                       if ((recovery_passes & RECOVERY_PASS_ALL_FSCK) == RECOVERY_PASS_ALL_FSCK)
+                               prt_str(&buf, "fsck required");
+                       else {
+                               prt_str(&buf, "running recovery passses: ");
+                               prt_bitflags(&buf, bch2_recovery_passes, recovery_passes);
+                       }
 
                        c->recovery_passes_explicit |= recovery_passes;
                        c->opts.fix_errors = FSCK_FIX_yes;
@@ -1188,42 +579,19 @@ static void check_version_upgrade(struct bch_fs *c)
        }
 }
 
-static int bch2_check_allocations(struct bch_fs *c)
-{
-       return bch2_gc(c, true, c->opts.norecovery);
-}
-
-static int bch2_set_may_go_rw(struct bch_fs *c)
-{
-       set_bit(BCH_FS_MAY_GO_RW, &c->flags);
-       return 0;
-}
-
-struct recovery_pass_fn {
-       int             (*fn)(struct bch_fs *);
-       const char      *name;
-       unsigned        when;
-};
-
-static struct recovery_pass_fn recovery_passes[] = {
-#define x(_fn, _when)  { .fn = bch2_##_fn, .name = #_fn, .when = _when },
-       BCH_RECOVERY_PASSES()
-#undef x
-};
-
 u64 bch2_fsck_recovery_passes(void)
 {
        u64 ret = 0;
 
-       for (unsigned i = 0; i < ARRAY_SIZE(recovery_passes); i++)
-               if (recovery_passes[i].when & PASS_FSCK)
+       for (unsigned i = 0; i < ARRAY_SIZE(recovery_pass_fns); i++)
+               if (recovery_pass_fns[i].when & PASS_FSCK)
                        ret |= BIT_ULL(i);
        return ret;
 }
 
 static bool should_run_recovery_pass(struct bch_fs *c, enum bch_recovery_pass pass)
 {
-       struct recovery_pass_fn *p = recovery_passes + c->curr_recovery_pass;
+       struct recovery_pass_fn *p = recovery_pass_fns + c->curr_recovery_pass;
 
        if (c->opts.norecovery && pass > BCH_RECOVERY_PASS_snapshots_read)
                return false;
@@ -1245,15 +613,18 @@ static int bch2_run_recovery_pass(struct bch_fs *c, enum bch_recovery_pass pass)
        c->curr_recovery_pass = pass;
 
        if (should_run_recovery_pass(c, pass)) {
-               struct recovery_pass_fn *p = recovery_passes + pass;
+               struct recovery_pass_fn *p = recovery_pass_fns + pass;
 
                if (!(p->when & PASS_SILENT))
-                       printk(KERN_INFO bch2_log_msg(c, "%s..."), p->name);
+                       printk(KERN_INFO bch2_log_msg(c, "%s..."),
+                              bch2_recovery_passes[pass]);
                ret = p->fn(c);
                if (ret)
                        return ret;
                if (!(p->when & PASS_SILENT))
                        printk(KERN_CONT " done\n");
+
+               c->recovery_passes_complete |= BIT_ULL(pass);
        }
 
        return 0;
@@ -1262,20 +633,16 @@ static int bch2_run_recovery_pass(struct bch_fs *c, enum bch_recovery_pass pass)
 static int bch2_run_recovery_passes(struct bch_fs *c)
 {
        int ret = 0;
-again:
-       while (c->curr_recovery_pass < ARRAY_SIZE(recovery_passes)) {
+
+       while (c->curr_recovery_pass < ARRAY_SIZE(recovery_pass_fns)) {
                ret = bch2_run_recovery_pass(c, c->curr_recovery_pass);
+               if (bch2_err_matches(ret, BCH_ERR_restart_recovery))
+                       continue;
                if (ret)
                        break;
                c->curr_recovery_pass++;
        }
 
-       if (bch2_err_matches(ret, BCH_ERR_need_snapshot_cleanup)) {
-               set_bit(BCH_FS_HAVE_DELETED_SNAPSHOTS, &c->flags);
-               c->curr_recovery_pass = BCH_RECOVERY_PASS_delete_dead_snapshots;
-               goto again;
-       }
-
        return ret;
 }
 
@@ -1287,17 +654,17 @@ int bch2_fs_recovery(struct bch_fs *c)
        bool write_sb = false;
        int ret = 0;
 
-       if (c->sb.clean)
-               clean = read_superblock_clean(c);
-       ret = PTR_ERR_OR_ZERO(clean);
-       if (ret)
-               goto err;
+       if (c->sb.clean) {
+               clean = bch2_read_superblock_clean(c);
+               ret = PTR_ERR_OR_ZERO(clean);
+               if (ret)
+                       goto err;
 
-       if (c->sb.clean)
                bch_info(c, "recovering from clean shutdown, journal seq %llu",
                         le64_to_cpu(clean->journal_seq));
-       else
+       } else {
                bch_info(c, "recovering from unclean shutdown");
+       }
 
        if (!(c->sb.features & (1ULL << BCH_FEATURE_new_extent_overwrite))) {
                bch_err(c, "feature new_extent_overwrite not set, filesystem no longer supported");
@@ -1312,12 +679,6 @@ int bch2_fs_recovery(struct bch_fs *c)
                goto err;
        }
 
-       if (!(c->sb.compat & (1ULL << BCH_COMPAT_bformat_overflow_done))) {
-               bch_err(c, "filesystem may have incompatible bkey formats; run fsck from the compat branch to fix");
-               ret = -EINVAL;
-               goto err;
-       }
-
        if (c->opts.fsck || !(c->opts.nochanges && c->opts.norecovery))
                check_version_upgrade(c);
 
@@ -1377,12 +738,12 @@ int bch2_fs_recovery(struct bch_fs *c)
                                }
                }
 
-               ret = journal_keys_sort(c);
+               ret = bch2_journal_keys_sort(c);
                if (ret)
                        goto err;
 
                if (c->sb.clean && last_journal_entry) {
-                       ret = verify_superblock_clean(c, &clean,
+                       ret = bch2_verify_superblock_clean(c, &clean,
                                                      last_journal_entry);
                        if (ret)
                                goto err;
@@ -1399,7 +760,7 @@ use_clean:
        }
 
        c->journal_replay_seq_start     = last_seq;
-       c->journal_replay_seq_end       = blacklist_seq - 1;;
+       c->journal_replay_seq_end       = blacklist_seq - 1;
 
        if (c->opts.reconstruct_alloc) {
                c->sb.compat &= ~(1ULL << BCH_COMPAT_alloc_info);
@@ -1453,10 +814,38 @@ use_clean:
        if (ret)
                goto err;
 
+       if (c->opts.fsck &&
+           (IS_ENABLED(CONFIG_BCACHEFS_DEBUG) ||
+            BCH_SB_HAS_TOPOLOGY_ERRORS(c->disk_sb.sb)))
+               c->recovery_passes_explicit |= BIT_ULL(BCH_RECOVERY_PASS_check_topology);
+
        ret = bch2_run_recovery_passes(c);
        if (ret)
                goto err;
 
+       /* If we fixed errors, verify that fs is actually clean now: */
+       if (IS_ENABLED(CONFIG_BCACHEFS_DEBUG) &&
+           test_bit(BCH_FS_ERRORS_FIXED, &c->flags) &&
+           !test_bit(BCH_FS_ERRORS_NOT_FIXED, &c->flags) &&
+           !test_bit(BCH_FS_ERROR, &c->flags)) {
+               bch_info(c, "Fixed errors, running fsck a second time to verify fs is clean");
+               clear_bit(BCH_FS_ERRORS_FIXED, &c->flags);
+
+               c->curr_recovery_pass = BCH_RECOVERY_PASS_check_alloc_info;
+
+               ret = bch2_run_recovery_passes(c);
+               if (ret)
+                       goto err;
+
+               if (test_bit(BCH_FS_ERRORS_FIXED, &c->flags) ||
+                   test_bit(BCH_FS_ERRORS_NOT_FIXED, &c->flags)) {
+                       bch_err(c, "Second fsck run was not clean");
+                       set_bit(BCH_FS_ERRORS_NOT_FIXED, &c->flags);
+               }
+
+               set_bit(BCH_FS_ERRORS_FIXED, &c->flags);
+       }
+
        if (enabled_qtypes(c)) {
                bch_verbose(c, "reading quotas");
                ret = bch2_fs_quota_read(c);
@@ -1489,7 +878,6 @@ use_clean:
        mutex_unlock(&c->sb_lock);
 
        if (!(c->sb.compat & (1ULL << BCH_COMPAT_extents_above_btree_updates_done)) ||
-           !(c->sb.compat & (1ULL << BCH_COMPAT_bformat_overflow_done)) ||
            c->sb.version_min < bcachefs_metadata_version_btree_ptr_sectors_written) {
                struct bch_move_stats stats;
 
@@ -1557,7 +945,7 @@ int bch2_fs_initialize(struct bch_fs *c)
        }
        mutex_unlock(&c->sb_lock);
 
-       c->curr_recovery_pass = ARRAY_SIZE(recovery_passes);
+       c->curr_recovery_pass = ARRAY_SIZE(recovery_pass_fns);
        set_bit(BCH_FS_MAY_GO_RW, &c->flags);
        set_bit(BCH_FS_FSCK_DONE, &c->flags);