btrfs-progs: test: Add image for quota verify stack overflow
[platform/upstream/btrfs-progs.git] / cmds-check.c
index 41152e9..670ccd1 100644 (file)
@@ -67,7 +67,6 @@ static u64 data_bytes_referenced = 0;
 static int found_old_backref = 0;
 static LIST_HEAD(duplicate_extents);
 static LIST_HEAD(delete_items);
-static int repair = 0;
 static int no_holes = 0;
 static int init_extent_tree = 0;
 static int check_data_csum = 0;
@@ -75,9 +74,17 @@ static struct btrfs_fs_info *global_info;
 static struct task_ctx ctx = { 0 };
 static struct cache_tree *roots_info_cache = NULL;
 
+enum btrfs_check_mode {
+       CHECK_MODE_ORIGINAL,
+       CHECK_MODE_LOWMEM,
+       CHECK_MODE_UNKNOWN,
+       CHECK_MODE_DEFAULT = CHECK_MODE_ORIGINAL
+};
+
+static enum btrfs_check_mode check_mode = CHECK_MODE_DEFAULT;
+
 struct extent_backref {
        struct list_head list;
-       struct rb_node node;
        unsigned int is_data:1;
        unsigned int found_extent_tree:1;
        unsigned int full_backref:1;
@@ -90,11 +97,6 @@ static inline struct extent_backref* to_extent_backref(struct list_head *entry)
        return list_entry(entry, struct extent_backref, list);
 }
 
-static inline struct extent_backref* rb_node_to_extent_backref(struct rb_node *node)
-{
-       return rb_entry(node, struct extent_backref, node);
-}
-
 struct data_backref {
        struct extent_backref node;
        union {
@@ -115,56 +117,6 @@ static inline struct data_backref* to_data_backref(struct extent_backref *back)
        return container_of(back, struct data_backref, node);
 }
 
-static int compare_data_backref(struct rb_node *node1, struct rb_node *node2)
-{
-       struct extent_backref *ext1 = rb_node_to_extent_backref(node1);
-       struct extent_backref *ext2 = rb_node_to_extent_backref(node2);
-       struct data_backref *back1 = to_data_backref(ext1);
-       struct data_backref *back2 = to_data_backref(ext2);
-
-       WARN_ON(!ext1->is_data);
-       WARN_ON(!ext2->is_data);
-
-       /* parent and root are a union, so this covers both */
-       if (back1->parent > back2->parent)
-               return 1;
-       if (back1->parent < back2->parent)
-               return -1;
-
-       /* This is a full backref and the parents match. */
-       if (back1->node.full_backref)
-               return 0;
-
-       if (back1->owner > back2->owner)
-               return 1;
-       if (back1->owner < back2->owner)
-               return -1;
-
-       if (back1->offset > back2->offset)
-               return 1;
-       if (back1->offset < back2->offset)
-               return -1;
-
-       if (back1->bytes > back2->bytes)
-               return 1;
-       if (back1->bytes < back2->bytes)
-               return -1;
-
-       if (back1->found_ref && back2->found_ref) {
-               if (back1->disk_bytenr > back2->disk_bytenr)
-                       return 1;
-               if (back1->disk_bytenr < back2->disk_bytenr)
-                       return -1;
-
-               if (back1->found_ref > back2->found_ref)
-                       return 1;
-               if (back1->found_ref < back2->found_ref)
-                       return -1;
-       }
-
-       return 0;
-}
-
 /*
  * Much like data_backref, just removed the undetermined members
  * and change it to use list_head.
@@ -193,54 +145,12 @@ static inline struct tree_backref* to_tree_backref(struct extent_backref *back)
        return container_of(back, struct tree_backref, node);
 }
 
-static int compare_tree_backref(struct rb_node *node1, struct rb_node *node2)
-{
-       struct extent_backref *ext1 = rb_node_to_extent_backref(node1);
-       struct extent_backref *ext2 = rb_node_to_extent_backref(node2);
-       struct tree_backref *back1 = to_tree_backref(ext1);
-       struct tree_backref *back2 = to_tree_backref(ext2);
-
-       WARN_ON(ext1->is_data);
-       WARN_ON(ext2->is_data);
-
-       /* parent and root are a union, so this covers both */
-       if (back1->parent > back2->parent)
-               return 1;
-       if (back1->parent < back2->parent)
-               return -1;
-
-       return 0;
-}
-
-static int compare_extent_backref(struct rb_node *node1, struct rb_node *node2)
-{
-       struct extent_backref *ext1 = rb_node_to_extent_backref(node1);
-       struct extent_backref *ext2 = rb_node_to_extent_backref(node2);
-
-       if (ext1->is_data > ext2->is_data)
-               return 1;
-
-       if (ext1->is_data < ext2->is_data)
-               return -1;
-
-       if (ext1->full_backref > ext2->full_backref)
-               return 1;
-       if (ext1->full_backref < ext2->full_backref)
-               return -1;
-
-       if (ext1->is_data)
-               return compare_data_backref(node1, node2);
-       else
-               return compare_tree_backref(node1, node2);
-}
-
 /* Explicit initialization for extent_record::flag_block_full_backref */
 enum { FLAG_UNSET = 2 };
 
 struct extent_record {
        struct list_head backrefs;
        struct list_head dups;
-       struct rb_root backref_tree;
        struct list_head list;
        struct cache_extent cache;
        struct btrfs_disk_key parent_key;
@@ -441,6 +351,23 @@ struct root_item_info {
        struct cache_extent cache_extent;
 };
 
+/*
+ * Error bit for low memory mode check.
+ *
+ * Currently no caller cares about it yet.  Just internal use for error
+ * classification.
+ */
+#define BACKREF_MISSING                (1 << 0) /* Backref missing in extent tree */
+#define BACKREF_MISMATCH       (1 << 1) /* Backref exists but does not match */
+#define BYTES_UNALIGNED                (1 << 2) /* Some bytes are not aligned */
+#define REFERENCER_MISSING     (1 << 3) /* Referencer not found */
+#define REFERENCER_MISMATCH    (1 << 4) /* Referenceer found but does not match */
+#define CROSSING_STRIPE_BOUNDARY (1 << 4) /* For kernel scrub workaround */
+#define ITEM_SIZE_MISMATCH     (1 << 5) /* Bad item size */
+#define UNKNOWN_TYPE           (1 << 6) /* Unknown type */
+#define ACCOUNTING_MISMATCH    (1 << 7) /* Used space accounting error */
+#define CHUNK_TYPE_MISMATCH    (1 << 8)
+
 static void *print_status_check(void *p)
 {
        struct task_ctx *priv = p;
@@ -475,6 +402,18 @@ static int print_status_return(void *p)
        return 0;
 }
 
+static enum btrfs_check_mode parse_check_mode(const char *str)
+{
+       if (strcmp(str, "lowmem") == 0)
+               return CHECK_MODE_LOWMEM;
+       if (strcmp(str, "orig") == 0)
+               return CHECK_MODE_ORIGINAL;
+       if (strcmp(str, "original") == 0)
+               return CHECK_MODE_ORIGINAL;
+
+       return CHECK_MODE_UNKNOWN;
+}
+
 /* Compatible function to allow reuse of old codes */
 static u64 first_extent_gap(struct rb_root *holes)
 {
@@ -720,6 +659,7 @@ static struct inode_record *clone_inode_rec(struct inode_record *orig_rec)
        struct inode_backref *tmp;
        struct orphan_data_extent *src_orphan;
        struct orphan_data_extent *dst_orphan;
+       struct rb_node *rb;
        size_t size;
        int ret;
 
@@ -752,10 +692,21 @@ static struct inode_record *clone_inode_rec(struct inode_record *orig_rec)
                list_add_tail(&dst_orphan->list, &rec->orphan_extents);
        }
        ret = copy_file_extent_holes(&rec->holes, &orig_rec->holes);
-       BUG_ON(ret < 0);
+       if (ret < 0)
+               goto cleanup_rb;
 
        return rec;
 
+cleanup_rb:
+       rb = rb_first(&rec->holes);
+       while (rb) {
+               struct file_extent_hole *hole;
+
+               hole = rb_entry(rb, struct file_extent_hole, node);
+               rb = rb_next(rb);
+               free(hole);
+       }
+
 cleanup:
        if (!list_empty(&rec->backrefs))
                list_for_each_entry_safe(orig, tmp, &rec->backrefs, list) {
@@ -1960,8 +1911,14 @@ static int check_child_node(struct btrfs_root *root,
        return ret;
 }
 
+struct node_refs {
+       u64 bytenr[BTRFS_MAX_LEVEL];
+       u64 refs[BTRFS_MAX_LEVEL];
+};
+
 static int walk_down_tree(struct btrfs_root *root, struct btrfs_path *path,
-                         struct walk_control *wc, int *level)
+                         struct walk_control *wc, int *level,
+                         struct node_refs *nrefs)
 {
        enum btrfs_tree_block_status status;
        u64 bytenr;
@@ -1974,12 +1931,20 @@ static int walk_down_tree(struct btrfs_root *root, struct btrfs_path *path,
 
        WARN_ON(*level < 0);
        WARN_ON(*level >= BTRFS_MAX_LEVEL);
-       ret = btrfs_lookup_extent_info(NULL, root,
+
+       if (path->nodes[*level]->start == nrefs->bytenr[*level]) {
+               refs = nrefs->refs[*level];
+               ret = 0;
+       } else {
+               ret = btrfs_lookup_extent_info(NULL, root,
                                       path->nodes[*level]->start,
                                       *level, 1, &refs, NULL);
-       if (ret < 0) {
-               err = ret;
-               goto out;
+               if (ret < 0) {
+                       err = ret;
+                       goto out;
+               }
+               nrefs->bytenr[*level] = path->nodes[*level]->start;
+               nrefs->refs[*level] = refs;
        }
 
        if (refs > 1) {
@@ -2010,10 +1975,19 @@ static int walk_down_tree(struct btrfs_root *root, struct btrfs_path *path,
                bytenr = btrfs_node_blockptr(cur, path->slots[*level]);
                ptr_gen = btrfs_node_ptr_generation(cur, path->slots[*level]);
                blocksize = root->nodesize;
-               ret = btrfs_lookup_extent_info(NULL, root, bytenr, *level - 1,
-                                              1, &refs, NULL);
-               if (ret < 0)
-                       refs = 0;
+
+               if (bytenr == nrefs->bytenr[*level - 1]) {
+                       refs = nrefs->refs[*level - 1];
+               } else {
+                       ret = btrfs_lookup_extent_info(NULL, root, bytenr,
+                                       *level - 1, 1, &refs, NULL);
+                       if (ret < 0) {
+                               refs = 0;
+                       } else {
+                               nrefs->bytenr[*level - 1] = bytenr;
+                               nrefs->refs[*level - 1] = refs;
+                       }
+               }
 
                if (refs > 1) {
                        ret = enter_shared_node(root, bytenr, refs,
@@ -3248,7 +3222,7 @@ static void free_root_record(struct cache_extent *cache)
                free(backref);
        }
 
-       kfree(rec);
+       free(rec);
 }
 
 FREE_EXTENT_CACHE_BASED_TREE(root_recs, free_root_record);
@@ -3626,6 +3600,7 @@ static int check_fs_root(struct btrfs_root *root,
        struct orphan_data_extent *orphan;
        struct orphan_data_extent *tmp;
        enum btrfs_tree_block_status status;
+       struct node_refs nrefs;
 
        /*
         * Reuse the corrupt_block cache tree to record corrupted tree block
@@ -3647,6 +3622,7 @@ static int check_fs_root(struct btrfs_root *root,
        memset(&root_node, 0, sizeof(root_node));
        cache_tree_init(&root_node.root_cache);
        cache_tree_init(&root_node.inode_cache);
+       memset(&nrefs, 0, sizeof(nrefs));
 
        /* Move the orphan extent record to corresponding inode_record */
        list_for_each_entry_safe(orphan, tmp,
@@ -3686,6 +3662,11 @@ static int check_fs_root(struct btrfs_root *root,
                btrfs_disk_key_to_cpu(&key, &root_item->drop_progress);
                level = root_item->drop_level;
                path.lowest_level = level;
+               if (level > btrfs_header_level(root->node) ||
+                   level >= BTRFS_MAX_LEVEL) {
+                       error("ignoring invalid drop level: %u", level);
+                       goto skip_walking;
+               }
                wret = btrfs_search_slot(NULL, root, &key, &path, 0, 0);
                if (wret < 0)
                        goto skip_walking;
@@ -3696,7 +3677,7 @@ static int check_fs_root(struct btrfs_root *root,
        }
 
        while (1) {
-               wret = walk_down_tree(root, &path, wc, &level);
+               wret = walk_down_tree(root, &path, wc, &level, &nrefs);
                if (wret < 0)
                        ret = wret;
                if (wret != 0)
@@ -4471,31 +4452,32 @@ static int check_block(struct btrfs_root *root,
        return ret;
 }
 
-
 static struct tree_backref *find_tree_backref(struct extent_record *rec,
                                                u64 parent, u64 root)
 {
-       struct rb_node *node;
-       struct tree_backref *back = NULL;
-       struct tree_backref match = {
-               .node = {
-                       .is_data = 0,
-               },
-       };
+       struct list_head *cur = rec->backrefs.next;
+       struct extent_backref *node;
+       struct tree_backref *back;
 
-       if (parent) {
-               match.parent = parent;
-               match.node.full_backref = 1;
-       } else {
-               match.root = root;
+       while(cur != &rec->backrefs) {
+               node = to_extent_backref(cur);
+               cur = cur->next;
+               if (node->is_data)
+                       continue;
+               back = to_tree_backref(node);
+               if (parent > 0) {
+                       if (!node->full_backref)
+                               continue;
+                       if (parent == back->parent)
+                               return back;
+               } else {
+                       if (node->full_backref)
+                               continue;
+                       if (back->root == root)
+                               return back;
+               }
        }
-
-       node = rb_search(&rec->backref_tree, &match.node.node,
-                        (rb_compare_keys)compare_extent_backref, NULL);
-       if (node)
-               back = to_tree_backref(rb_node_to_extent_backref(node));
-
-       return back;
+       return NULL;
 }
 
 static struct tree_backref *alloc_tree_backref(struct extent_record *rec,
@@ -4514,7 +4496,6 @@ static struct tree_backref *alloc_tree_backref(struct extent_record *rec,
                ref->node.full_backref = 0;
        }
        list_add_tail(&ref->node.list, &rec->backrefs);
-       rb_insert(&rec->backref_tree, &ref->node.node, compare_extent_backref);
 
        return ref;
 }
@@ -4525,32 +4506,35 @@ static struct data_backref *find_data_backref(struct extent_record *rec,
                                                int found_ref,
                                                u64 disk_bytenr, u64 bytes)
 {
-       struct rb_node *node;
-       struct data_backref *back = NULL;
-       struct data_backref match = {
-               .node = {
-                       .is_data = 1,
-               },
-               .owner = owner,
-               .offset = offset,
-               .bytes = bytes,
-               .found_ref = found_ref,
-               .disk_bytenr = disk_bytenr,
-       };
+       struct list_head *cur = rec->backrefs.next;
+       struct extent_backref *node;
+       struct data_backref *back;
 
-       if (parent) {
-               match.parent = parent;
-               match.node.full_backref = 1;
-       } else {
-               match.root = root;
+       while(cur != &rec->backrefs) {
+               node = to_extent_backref(cur);
+               cur = cur->next;
+               if (!node->is_data)
+                       continue;
+               back = to_data_backref(node);
+               if (parent > 0) {
+                       if (!node->full_backref)
+                               continue;
+                       if (parent == back->parent)
+                               return back;
+               } else {
+                       if (node->full_backref)
+                               continue;
+                       if (back->root == root && back->owner == owner &&
+                           back->offset == offset) {
+                               if (found_ref && node->found_ref &&
+                                   (back->bytes != bytes ||
+                                   back->disk_bytenr != disk_bytenr))
+                                       continue;
+                               return back;
+                       }
+               }
        }
-
-       node = rb_search(&rec->backref_tree, &match.node.node,
-                        (rb_compare_keys)compare_extent_backref, NULL);
-       if (node)
-               back = to_data_backref(rb_node_to_extent_backref(node));
-
-       return back;
+       return NULL;
 }
 
 static struct data_backref *alloc_data_backref(struct extent_record *rec,
@@ -4580,7 +4564,6 @@ static struct data_backref *alloc_data_backref(struct extent_record *rec,
        ref->found_ref = 0;
        ref->num_refs = 0;
        list_add_tail(&ref->node.list, &rec->backrefs);
-       rb_insert(&rec->backref_tree, &ref->node.node, compare_extent_backref);
        if (max_size > rec->max_size)
                rec->max_size = max_size;
        return ref;
@@ -4668,12 +4651,14 @@ static int add_extent_rec_nolookup(struct cache_tree *extent_cache,
        INIT_LIST_HEAD(&rec->backrefs);
        INIT_LIST_HEAD(&rec->dups);
        INIT_LIST_HEAD(&rec->list);
-       rec->backref_tree = RB_ROOT;
        memcpy(&rec->parent_key, &tmpl->parent_key, sizeof(tmpl->parent_key));
        rec->cache.start = tmpl->start;
        rec->cache.size = tmpl->nr;
        ret = insert_cache_extent(extent_cache, &rec->cache);
-       BUG_ON(ret);
+       if (ret) {
+               free(rec);
+               return ret;
+       }
        bytes_used += rec->nr;
 
        if (tmpl->metadata)
@@ -4796,6 +4781,7 @@ static int add_tree_backref(struct cache_tree *extent_cache, u64 bytenr,
        struct extent_record *rec;
        struct tree_backref *back;
        struct cache_extent *cache;
+       int ret;
 
        cache = lookup_cache_extent(extent_cache, bytenr, 1);
        if (!cache) {
@@ -4806,22 +4792,29 @@ static int add_tree_backref(struct cache_tree *extent_cache, u64 bytenr,
                tmpl.nr = 1;
                tmpl.metadata = 1;
 
-               add_extent_rec_nolookup(extent_cache, &tmpl);
+               ret = add_extent_rec_nolookup(extent_cache, &tmpl);
+               if (ret)
+                       return ret;
 
+               /* really a bug in cache_extent implement now */
                cache = lookup_cache_extent(extent_cache, bytenr, 1);
                if (!cache)
-                       abort();
+                       return -ENOENT;
        }
 
        rec = container_of(cache, struct extent_record, cache);
        if (rec->start != bytenr) {
-               abort();
+               /*
+                * Several cause, from unaligned bytenr to over lapping extents
+                */
+               return -EEXIST;
        }
 
        back = find_tree_backref(rec, parent, root);
        if (!back) {
                back = alloc_tree_backref(rec, parent, root);
-               BUG_ON(!back);
+               if (!back)
+                       return -ENOMEM;
        }
 
        if (found_ref) {
@@ -4855,6 +4848,7 @@ static int add_data_backref(struct cache_tree *extent_cache, u64 bytenr,
        struct extent_record *rec;
        struct data_backref *back;
        struct cache_extent *cache;
+       int ret;
 
        cache = lookup_cache_extent(extent_cache, bytenr, 1);
        if (!cache) {
@@ -4865,7 +4859,9 @@ static int add_data_backref(struct cache_tree *extent_cache, u64 bytenr,
                tmpl.nr = 1;
                tmpl.max_size = max_size;
 
-               add_extent_rec_nolookup(extent_cache, &tmpl);
+               ret = add_extent_rec_nolookup(extent_cache, &tmpl);
+               if (ret)
+                       return ret;
 
                cache = lookup_cache_extent(extent_cache, bytenr, 1);
                if (!cache)
@@ -5098,16 +5094,18 @@ static int process_extent_ref_v0(struct cache_tree *extent_cache,
 {
        struct btrfs_extent_ref_v0 *ref0;
        struct btrfs_key key;
+       int ret;
 
        btrfs_item_key_to_cpu(leaf, &key, slot);
        ref0 = btrfs_item_ptr(leaf, slot, struct btrfs_extent_ref_v0);
        if (btrfs_ref_objectid_v0(leaf, ref0) < BTRFS_FIRST_FREE_OBJECTID) {
-               add_tree_backref(extent_cache, key.objectid, key.offset, 0, 0);
+               ret = add_tree_backref(extent_cache, key.objectid, key.offset,
+                               0, 0);
        } else {
-               add_data_backref(extent_cache, key.objectid, key.offset, 0,
-                                0, 0, btrfs_ref_count_v0(leaf, ref0), 0, 0);
+               ret = add_data_backref(extent_cache, key.objectid, key.offset,
+                               0, 0, 0, btrfs_ref_count_v0(leaf, ref0), 0, 0);
        }
-       return 0;
+       return ret;
 }
 #endif
 
@@ -5169,8 +5167,24 @@ static int process_chunk_item(struct cache_tree *chunk_cache,
                              int slot)
 {
        struct chunk_record *rec;
+       struct btrfs_chunk *chunk;
        int ret = 0;
 
+       chunk = btrfs_item_ptr(eb, slot, struct btrfs_chunk);
+       /*
+        * Do extra check for this chunk item,
+        *
+        * It's still possible one can craft a leaf with CHUNK_ITEM, with
+        * wrong onwer(3) out of chunk tree, to pass both chunk tree check
+        * and owner<->key_type check.
+        */
+       ret = btrfs_check_chunk_valid(global_info->tree_root, eb, chunk, slot,
+                                     key->offset);
+       if (ret < 0) {
+               error("chunk(%llu, %llu) is not valid, ignore it",
+                     key->offset, btrfs_chunk_length(eb, chunk));
+               return 0;
+       }
        rec = btrfs_new_chunk_record(eb, key, slot);
        ret = insert_cache_extent(chunk_cache, &rec->cache);
        if (ret) {
@@ -5334,6 +5348,7 @@ static int process_extent_item(struct btrfs_root *root,
        struct extent_record tmpl;
        unsigned long end;
        unsigned long ptr;
+       int ret;
        int type;
        u32 item_size = btrfs_item_size_nr(eb, slot);
        u64 refs = 0;
@@ -5350,6 +5365,11 @@ static int process_extent_item(struct btrfs_root *root,
                num_bytes = key.offset;
        }
 
+       if (!IS_ALIGNED(key.objectid, root->sectorsize)) {
+               error("ignoring invalid extent, bytenr %llu is not aligned to %u",
+                     key.objectid, root->sectorsize);
+               return -EIO;
+       }
        if (item_size < sizeof(*ei)) {
 #ifdef BTRFS_COMPAT_EXTENT_TREE_V0
                struct btrfs_extent_item_v0 *ei0;
@@ -5376,6 +5396,16 @@ static int process_extent_item(struct btrfs_root *root,
                metadata = 1;
        else
                metadata = 0;
+       if (metadata && num_bytes != root->nodesize) {
+               error("ignore invalid metadata extent, length %llu does not equal to %u",
+                     num_bytes, root->nodesize);
+               return -EIO;
+       }
+       if (!metadata && !IS_ALIGNED(num_bytes, root->sectorsize)) {
+               error("ignore invalid data extent, length %llu is not aligned to %u",
+                     num_bytes, root->sectorsize);
+               return -EIO;
+       }
 
        memset(&tmpl, 0, sizeof(tmpl));
        tmpl.start = key.objectid;
@@ -5398,12 +5428,18 @@ static int process_extent_item(struct btrfs_root *root,
                offset = btrfs_extent_inline_ref_offset(eb, iref);
                switch (type) {
                case BTRFS_TREE_BLOCK_REF_KEY:
-                       add_tree_backref(extent_cache, key.objectid,
-                                        0, offset, 0);
+                       ret = add_tree_backref(extent_cache, key.objectid,
+                                       0, offset, 0);
+                       if (ret < 0)
+                               error("add_tree_backref failed: %s",
+                                     strerror(-ret));
                        break;
                case BTRFS_SHARED_BLOCK_REF_KEY:
-                       add_tree_backref(extent_cache, key.objectid,
-                                        offset, 0, 0);
+                       ret = add_tree_backref(extent_cache, key.objectid,
+                                       offset, 0, 0);
+                       if (ret < 0)
+                               error("add_tree_backref failed: %s",
+                                     strerror(-ret));
                        break;
                case BTRFS_EXTENT_DATA_REF_KEY:
                        dref = (struct btrfs_extent_data_ref *)(&iref->offset);
@@ -5459,7 +5495,7 @@ static int check_cache_range(struct btrfs_root *root,
                                continue;
                        if (logical[nr] == offset) {
                                if (stripe_len >= bytes) {
-                                       kfree(logical);
+                                       free(logical);
                                        return 0;
                                }
                                bytes -= stripe_len;
@@ -5467,7 +5503,7 @@ static int check_cache_range(struct btrfs_root *root,
                        } else if (logical[nr] < offset) {
                                if (logical[nr] + stripe_len >=
                                    offset + bytes) {
-                                       kfree(logical);
+                                       free(logical);
                                        return 0;
                                }
                                bytes = (offset + bytes) -
@@ -5490,7 +5526,7 @@ static int check_cache_range(struct btrfs_root *root,
                                                        offset,
                                                        logical[nr] - offset);
                                if (ret) {
-                                       kfree(logical);
+                                       free(logical);
                                        return ret;
                                }
 
@@ -5501,7 +5537,7 @@ static int check_cache_range(struct btrfs_root *root,
                        }
                }
 
-               kfree(logical);
+               free(logical);
        }
 
        entry = btrfs_find_free_space(cache->free_space_ctl, offset, bytes);
@@ -5725,7 +5761,7 @@ again:
 
                        csum = btrfs_csum_data(NULL, (char *)data + tmp,
                                               csum, root->sectorsize);
-                       btrfs_csum_final(csum, (char *)&csum);
+                       btrfs_csum_final(csum, (u8 *)&csum);
 
                        csum_offset = leaf_offset +
                                 tmp / root->sectorsize * csum_size;
@@ -6032,7 +6068,9 @@ static int calc_extent_flag(struct btrfs_root *root,
 
        cache = lookup_cache_extent(extent_cache, buf->start, 1);
        /* we have added this extent before */
-       BUG_ON(!cache);
+       if (!cache)
+               return -ENOENT;
+
        rec = container_of(cache, struct extent_record, cache);
 
        /*
@@ -6071,6 +6109,58 @@ full_backref:
        return 0;
 }
 
+static void report_mismatch_key_root(u8 key_type, u64 rootid)
+{
+       fprintf(stderr, "Invalid key type(");
+       print_key_type(stderr, 0, key_type);
+       fprintf(stderr, ") found in root(");
+       print_objectid(stderr, rootid, 0);
+       fprintf(stderr, ")\n");
+}
+
+/*
+ * Check if the key is valid with its extent buffer.
+ *
+ * This is a early check in case invalid key exists in a extent buffer
+ * This is not comprehensive yet, but should prevent wrong key/item passed
+ * further
+ */
+static int check_type_with_root(u64 rootid, u8 key_type)
+{
+       switch (key_type) {
+       /* Only valid in chunk tree */
+       case BTRFS_DEV_ITEM_KEY:
+       case BTRFS_CHUNK_ITEM_KEY:
+               if (rootid != BTRFS_CHUNK_TREE_OBJECTID)
+                       goto err;
+               break;
+       /* valid in csum and log tree */
+       case BTRFS_CSUM_TREE_OBJECTID:
+               if (!(rootid == BTRFS_TREE_LOG_OBJECTID ||
+                     is_fstree(rootid)))
+                       goto err;
+               break;
+       case BTRFS_EXTENT_ITEM_KEY:
+       case BTRFS_METADATA_ITEM_KEY:
+       case BTRFS_BLOCK_GROUP_ITEM_KEY:
+               if (rootid != BTRFS_EXTENT_TREE_OBJECTID)
+                       goto err;
+               break;
+       case BTRFS_ROOT_ITEM_KEY:
+               if (rootid != BTRFS_ROOT_TREE_OBJECTID)
+                       goto err;
+               break;
+       case BTRFS_DEV_EXTENT_KEY:
+               if (rootid != BTRFS_DEV_TREE_OBJECTID)
+                       goto err;
+               break;
+       }
+       return 0;
+err:
+       report_mismatch_key_root(key_type, rootid);
+       return -EINVAL;
+}
+
 static int run_next_block(struct btrfs_root *root,
                          struct block_info *bits,
                          int bits_nr,
@@ -6220,6 +6310,16 @@ static int run_next_block(struct btrfs_root *root,
                for (i = 0; i < nritems; i++) {
                        struct btrfs_file_extent_item *fi;
                        btrfs_item_key_to_cpu(buf, &key, i);
+                       /*
+                        * Check key type against the leaf owner.
+                        * Could filter quite a lot of early error if
+                        * owner is correct
+                        */
+                       if (check_type_with_root(btrfs_header_owner(buf),
+                                                key.type)) {
+                               fprintf(stderr, "ignoring invalid key\n");
+                               continue;
+                       }
                        if (key.type == BTRFS_EXTENT_ITEM_KEY) {
                                process_extent_item(root, extent_cache, buf,
                                                    i);
@@ -6264,13 +6364,19 @@ static int run_next_block(struct btrfs_root *root,
                        }
 
                        if (key.type == BTRFS_TREE_BLOCK_REF_KEY) {
-                               add_tree_backref(extent_cache, key.objectid, 0,
-                                                key.offset, 0);
+                               ret = add_tree_backref(extent_cache,
+                                               key.objectid, 0, key.offset, 0);
+                               if (ret < 0)
+                                       error("add_tree_backref failed: %s",
+                                             strerror(-ret));
                                continue;
                        }
                        if (key.type == BTRFS_SHARED_BLOCK_REF_KEY) {
-                               add_tree_backref(extent_cache, key.objectid,
-                                                key.offset, 0, 0);
+                               ret = add_tree_backref(extent_cache,
+                                               key.objectid, key.offset, 0, 0);
+                               if (ret < 0)
+                                       error("add_tree_backref failed: %s",
+                                             strerror(-ret));
                                continue;
                        }
                        if (key.type == BTRFS_EXTENT_DATA_REF_KEY) {
@@ -6368,9 +6474,16 @@ static int run_next_block(struct btrfs_root *root,
                        tmpl.metadata = 1;
                        tmpl.max_size = size;
                        ret = add_extent_rec(extent_cache, &tmpl);
-                       BUG_ON(ret);
+                       if (ret < 0)
+                               goto out;
 
-                       add_tree_backref(extent_cache, ptr, parent, owner, 1);
+                       ret = add_tree_backref(extent_cache, ptr, parent,
+                                       owner, 1);
+                       if (ret < 0) {
+                               error("add_tree_backref failed: %s",
+                                     strerror(-ret));
+                               continue;
+                       }
 
                        if (level > 1) {
                                add_pending(nodes, seen, ptr, size);
@@ -6404,6 +6517,7 @@ static int add_root_to_pending(struct extent_buffer *buf,
                               u64 objectid)
 {
        struct extent_record tmpl;
+       int ret;
 
        if (btrfs_header_level(buf) > 0)
                add_pending(nodes, seen, buf->start, buf->len);
@@ -6421,11 +6535,12 @@ static int add_root_to_pending(struct extent_buffer *buf,
 
        if (objectid == BTRFS_TREE_RELOC_OBJECTID ||
            btrfs_header_backref_rev(buf) < BTRFS_MIXED_BACKREF_REV)
-               add_tree_backref(extent_cache, buf->start, buf->start,
-                                0, 1);
+               ret = add_tree_backref(extent_cache, buf->start, buf->start,
+                               0, 1);
        else
-               add_tree_backref(extent_cache, buf->start, 0, objectid, 1);
-       return 0;
+               ret = add_tree_backref(extent_cache, buf->start, 0, objectid,
+                               1);
+       return ret;
 }
 
 /* as we fix the tree, we might be deleting blocks that
@@ -8275,8 +8390,10 @@ static int deal_root_from_list(struct list_head *list,
                        ret = -EIO;
                        break;
                }
-               add_root_to_pending(buf, extent_cache, pending,
+               ret = add_root_to_pending(buf, extent_cache, pending,
                                    seen, nodes, rec->objectid);
+               if (ret < 0)
+                       break;
                /*
                 * To rebuild extent tree, we need deal with snapshot
                 * one by one, otherwise we deal with node firstly which
@@ -8392,7 +8509,7 @@ again:
        btrfs_init_path(&path);
        key.offset = 0;
        key.objectid = 0;
-       btrfs_set_key_type(&key, BTRFS_ROOT_ITEM_KEY);
+       key.type = BTRFS_ROOT_ITEM_KEY;
        ret = btrfs_search_slot(NULL, root->fs_info->tree_root,
                                        &key, &path, 0, 0);
        if (ret < 0)
@@ -8408,7 +8525,7 @@ again:
                        slot = path.slots[0];
                }
                btrfs_item_key_to_cpu(leaf, &found_key, path.slots[0]);
-               if (btrfs_key_type(&found_key) == BTRFS_ROOT_ITEM_KEY) {
+               if (found_key.type == BTRFS_ROOT_ITEM_KEY) {
                        unsigned long offset;
                        u64 last_snapshot;
 
@@ -8525,48 +8642,1510 @@ loop:
        goto again;
 }
 
-static int btrfs_fsck_reinit_root(struct btrfs_trans_handle *trans,
-                          struct btrfs_root *root, int overwrite)
+/*
+ * Check backrefs of a tree block given by @bytenr or @eb.
+ *
+ * @root:      the root containing the @bytenr or @eb
+ * @eb:                tree block extent buffer, can be NULL
+ * @bytenr:    bytenr of the tree block to search
+ * @level:     tree level of the tree block
+ * @owner:     owner of the tree block
+ *
+ * Return >0 for any error found and output error message
+ * Return 0 for no error found
+ */
+static int check_tree_block_ref(struct btrfs_root *root,
+                               struct extent_buffer *eb, u64 bytenr,
+                               int level, u64 owner)
 {
-       struct extent_buffer *c;
-       struct extent_buffer *old = root->node;
-       int level;
+       struct btrfs_key key;
+       struct btrfs_root *extent_root = root->fs_info->extent_root;
+       struct btrfs_path path;
+       struct btrfs_extent_item *ei;
+       struct btrfs_extent_inline_ref *iref;
+       struct extent_buffer *leaf;
+       unsigned long end;
+       unsigned long ptr;
+       int slot;
+       int skinny_level;
+       int type;
+       u32 nodesize = root->nodesize;
+       u32 item_size;
+       u64 offset;
+       int found_ref = 0;
+       int err = 0;
        int ret;
-       struct btrfs_disk_key disk_key = {0,0,0};
 
-       level = 0;
+       btrfs_init_path(&path);
+       key.objectid = bytenr;
+       if (btrfs_fs_incompat(root->fs_info,
+                             BTRFS_FEATURE_INCOMPAT_SKINNY_METADATA))
+               key.type = BTRFS_METADATA_ITEM_KEY;
+       else
+               key.type = BTRFS_EXTENT_ITEM_KEY;
+       key.offset = (u64)-1;
 
-       if (overwrite) {
-               c = old;
-               extent_buffer_get(c);
-               goto init;
+       /* Search for the backref in extent tree */
+       ret = btrfs_search_slot(NULL, extent_root, &key, &path, 0, 0);
+       if (ret < 0) {
+               err |= BACKREF_MISSING;
+               goto out;
        }
-       c = btrfs_alloc_free_block(trans, root,
-                                  root->nodesize,
-                                  root->root_key.objectid,
-                                  &disk_key, level, 0, 0);
-       if (IS_ERR(c)) {
-               c = old;
-               extent_buffer_get(c);
-               overwrite = 1;
+       ret = btrfs_previous_extent_item(extent_root, &path, bytenr);
+       if (ret) {
+               err |= BACKREF_MISSING;
+               goto out;
        }
-init:
-       memset_extent_buffer(c, 0, 0, sizeof(struct btrfs_header));
-       btrfs_set_header_level(c, level);
-       btrfs_set_header_bytenr(c, c->start);
-       btrfs_set_header_generation(c, trans->transid);
-       btrfs_set_header_backref_rev(c, BTRFS_MIXED_BACKREF_REV);
-       btrfs_set_header_owner(c, root->root_key.objectid);
 
-       write_extent_buffer(c, root->fs_info->fsid,
-                           btrfs_header_fsid(), BTRFS_FSID_SIZE);
+       leaf = path.nodes[0];
+       slot = path.slots[0];
+       btrfs_item_key_to_cpu(leaf, &key, slot);
 
-       write_extent_buffer(c, root->fs_info->chunk_tree_uuid,
-                           btrfs_header_chunk_tree_uuid(c),
-                           BTRFS_UUID_SIZE);
+       ei = btrfs_item_ptr(leaf, slot, struct btrfs_extent_item);
 
-       btrfs_mark_buffer_dirty(c);
-       /*
+       if (key.type == BTRFS_METADATA_ITEM_KEY) {
+               skinny_level = (int)key.offset;
+               iref = (struct btrfs_extent_inline_ref *)(ei + 1);
+       } else {
+               struct btrfs_tree_block_info *info;
+
+               info = (struct btrfs_tree_block_info *)(ei + 1);
+               skinny_level = btrfs_tree_block_level(leaf, info);
+               iref = (struct btrfs_extent_inline_ref *)(info + 1);
+       }
+
+       if (eb) {
+               u64 header_gen;
+               u64 extent_gen;
+
+               if (!(btrfs_extent_flags(leaf, ei) &
+                     BTRFS_EXTENT_FLAG_TREE_BLOCK)) {
+                       error(
+               "extent[%llu %u] backref type mismatch, missing bit: %llx",
+                               key.objectid, nodesize,
+                               BTRFS_EXTENT_FLAG_TREE_BLOCK);
+                       err = BACKREF_MISMATCH;
+               }
+               header_gen = btrfs_header_generation(eb);
+               extent_gen = btrfs_extent_generation(leaf, ei);
+               if (header_gen != extent_gen) {
+                       error(
+       "extent[%llu %u] backref generation mismatch, wanted: %llu, have: %llu",
+                               key.objectid, nodesize, header_gen,
+                               extent_gen);
+                       err = BACKREF_MISMATCH;
+               }
+               if (level != skinny_level) {
+                       error(
+                       "extent[%llu %u] level mismatch, wanted: %u, have: %u",
+                               key.objectid, nodesize, level, skinny_level);
+                       err = BACKREF_MISMATCH;
+               }
+               if (!is_fstree(owner) && btrfs_extent_refs(leaf, ei) != 1) {
+                       error(
+                       "extent[%llu %u] is referred by other roots than %llu",
+                               key.objectid, nodesize, root->objectid);
+                       err = BACKREF_MISMATCH;
+               }
+       }
+
+       /*
+        * Iterate the extent/metadata item to find the exact backref
+        */
+       item_size = btrfs_item_size_nr(leaf, slot);
+       ptr = (unsigned long)iref;
+       end = (unsigned long)ei + item_size;
+       while (ptr < end) {
+               iref = (struct btrfs_extent_inline_ref *)ptr;
+               type = btrfs_extent_inline_ref_type(leaf, iref);
+               offset = btrfs_extent_inline_ref_offset(leaf, iref);
+
+               if (type == BTRFS_TREE_BLOCK_REF_KEY &&
+                       (offset == root->objectid || offset == owner)) {
+                       found_ref = 1;
+               } else if (type == BTRFS_SHARED_BLOCK_REF_KEY) {
+                       /* Check if the backref points to valid referencer */
+                       found_ref = !check_tree_block_ref(root, NULL, offset,
+                                                         level + 1, owner);
+               }
+
+               if (found_ref)
+                       break;
+               ptr += btrfs_extent_inline_ref_size(type);
+       }
+
+       /*
+        * Inlined extent item doesn't have what we need, check
+        * TREE_BLOCK_REF_KEY
+        */
+       if (!found_ref) {
+               btrfs_release_path(&path);
+               key.objectid = bytenr;
+               key.type = BTRFS_TREE_BLOCK_REF_KEY;
+               key.offset = root->objectid;
+
+               ret = btrfs_search_slot(NULL, extent_root, &key, &path, 0, 0);
+               if (!ret)
+                       found_ref = 1;
+       }
+       if (!found_ref)
+               err |= BACKREF_MISSING;
+out:
+       btrfs_release_path(&path);
+       if (eb && (err & BACKREF_MISSING))
+               error("extent[%llu %u] backref lost (owner: %llu, level: %u)",
+                       bytenr, nodesize, owner, level);
+       return err;
+}
+
+/*
+ * Check EXTENT_DATA item, mainly for its dbackref in extent tree
+ *
+ * Return >0 any error found and output error message
+ * Return 0 for no error found
+ */
+static int check_extent_data_item(struct btrfs_root *root,
+                                 struct extent_buffer *eb, int slot)
+{
+       struct btrfs_file_extent_item *fi;
+       struct btrfs_path path;
+       struct btrfs_root *extent_root = root->fs_info->extent_root;
+       struct btrfs_key fi_key;
+       struct btrfs_key dbref_key;
+       struct extent_buffer *leaf;
+       struct btrfs_extent_item *ei;
+       struct btrfs_extent_inline_ref *iref;
+       struct btrfs_extent_data_ref *dref;
+       u64 owner;
+       u64 file_extent_gen;
+       u64 disk_bytenr;
+       u64 disk_num_bytes;
+       u64 extent_num_bytes;
+       u64 extent_flags;
+       u64 extent_gen;
+       u32 item_size;
+       unsigned long end;
+       unsigned long ptr;
+       int type;
+       u64 ref_root;
+       int found_dbackref = 0;
+       int err = 0;
+       int ret;
+
+       btrfs_item_key_to_cpu(eb, &fi_key, slot);
+       fi = btrfs_item_ptr(eb, slot, struct btrfs_file_extent_item);
+       file_extent_gen = btrfs_file_extent_generation(eb, fi);
+
+       /* Nothing to check for hole and inline data extents */
+       if (btrfs_file_extent_type(eb, fi) == BTRFS_FILE_EXTENT_INLINE ||
+           btrfs_file_extent_disk_bytenr(eb, fi) == 0)
+               return 0;
+
+       disk_bytenr = btrfs_file_extent_disk_bytenr(eb, fi);
+       disk_num_bytes = btrfs_file_extent_disk_num_bytes(eb, fi);
+       extent_num_bytes = btrfs_file_extent_num_bytes(eb, fi);
+
+       /* Check unaligned disk_num_bytes and num_bytes */
+       if (!IS_ALIGNED(disk_num_bytes, root->sectorsize)) {
+               error(
+"file extent [%llu, %llu] has unaligned disk num bytes: %llu, should be aligned to %u",
+                       fi_key.objectid, fi_key.offset, disk_num_bytes,
+                       root->sectorsize);
+               err |= BYTES_UNALIGNED;
+       } else {
+               data_bytes_allocated += disk_num_bytes;
+       }
+       if (!IS_ALIGNED(extent_num_bytes, root->sectorsize)) {
+               error(
+"file extent [%llu, %llu] has unaligned num bytes: %llu, should be aligned to %u",
+                       fi_key.objectid, fi_key.offset, extent_num_bytes,
+                       root->sectorsize);
+               err |= BYTES_UNALIGNED;
+       } else {
+               data_bytes_referenced += extent_num_bytes;
+       }
+       owner = btrfs_header_owner(eb);
+
+       /* Check the extent item of the file extent in extent tree */
+       btrfs_init_path(&path);
+       dbref_key.objectid = btrfs_file_extent_disk_bytenr(eb, fi);
+       dbref_key.type = BTRFS_EXTENT_ITEM_KEY;
+       dbref_key.offset = btrfs_file_extent_disk_num_bytes(eb, fi);
+
+       ret = btrfs_search_slot(NULL, extent_root, &dbref_key, &path, 0, 0);
+       if (ret) {
+               err |= BACKREF_MISSING;
+               goto error;
+       }
+
+       leaf = path.nodes[0];
+       slot = path.slots[0];
+       ei = btrfs_item_ptr(leaf, slot, struct btrfs_extent_item);
+
+       extent_flags = btrfs_extent_flags(leaf, ei);
+       extent_gen = btrfs_extent_generation(leaf, ei);
+
+       if (!(extent_flags & BTRFS_EXTENT_FLAG_DATA)) {
+               error(
+                   "extent[%llu %llu] backref type mismatch, wanted bit: %llx",
+                   disk_bytenr, disk_num_bytes,
+                   BTRFS_EXTENT_FLAG_DATA);
+               err |= BACKREF_MISMATCH;
+       }
+
+       if (file_extent_gen < extent_gen) {
+               error(
+"extent[%llu %llu] backref generation mismatch, wanted: <=%llu, have: %llu",
+                       disk_bytenr, disk_num_bytes, file_extent_gen,
+                       extent_gen);
+               err |= BACKREF_MISMATCH;
+       }
+
+       /* Check data backref inside that extent item */
+       item_size = btrfs_item_size_nr(leaf, path.slots[0]);
+       iref = (struct btrfs_extent_inline_ref *)(ei + 1);
+       ptr = (unsigned long)iref;
+       end = (unsigned long)ei + item_size;
+       while (ptr < end) {
+               iref = (struct btrfs_extent_inline_ref *)ptr;
+               type = btrfs_extent_inline_ref_type(leaf, iref);
+               dref = (struct btrfs_extent_data_ref *)(&iref->offset);
+
+               if (type == BTRFS_EXTENT_DATA_REF_KEY) {
+                       ref_root = btrfs_extent_data_ref_root(leaf, dref);
+                       if (ref_root == owner || ref_root == root->objectid)
+                               found_dbackref = 1;
+               } else if (type == BTRFS_SHARED_DATA_REF_KEY) {
+                       found_dbackref = !check_tree_block_ref(root, NULL,
+                               btrfs_extent_inline_ref_offset(leaf, iref),
+                               0, owner);
+               }
+
+               if (found_dbackref)
+                       break;
+               ptr += btrfs_extent_inline_ref_size(type);
+       }
+
+       /* Didn't found inlined data backref, try EXTENT_DATA_REF_KEY */
+       if (!found_dbackref) {
+               btrfs_release_path(&path);
+
+               btrfs_init_path(&path);
+               dbref_key.objectid = btrfs_file_extent_disk_bytenr(eb, fi);
+               dbref_key.type = BTRFS_EXTENT_DATA_REF_KEY;
+               dbref_key.offset = hash_extent_data_ref(root->objectid,
+                               fi_key.objectid, fi_key.offset);
+
+               ret = btrfs_search_slot(NULL, root->fs_info->extent_root,
+                                       &dbref_key, &path, 0, 0);
+               if (!ret)
+                       found_dbackref = 1;
+       }
+
+       if (!found_dbackref)
+               err |= BACKREF_MISSING;
+error:
+       btrfs_release_path(&path);
+       if (err & BACKREF_MISSING) {
+               error("data extent[%llu %llu] backref lost",
+                     disk_bytenr, disk_num_bytes);
+       }
+       return err;
+}
+
+/*
+ * Get real tree block level for the case like shared block
+ * Return >= 0 as tree level
+ * Return <0 for error
+ */
+static int query_tree_block_level(struct btrfs_fs_info *fs_info, u64 bytenr)
+{
+       struct extent_buffer *eb;
+       struct btrfs_path path;
+       struct btrfs_key key;
+       struct btrfs_extent_item *ei;
+       u64 flags;
+       u64 transid;
+       u32 nodesize = btrfs_super_nodesize(fs_info->super_copy);
+       u8 backref_level;
+       u8 header_level;
+       int ret;
+
+       /* Search extent tree for extent generation and level */
+       key.objectid = bytenr;
+       key.type = BTRFS_METADATA_ITEM_KEY;
+       key.offset = (u64)-1;
+
+       btrfs_init_path(&path);
+       ret = btrfs_search_slot(NULL, fs_info->extent_root, &key, &path, 0, 0);
+       if (ret < 0)
+               goto release_out;
+       ret = btrfs_previous_extent_item(fs_info->extent_root, &path, bytenr);
+       if (ret < 0)
+               goto release_out;
+       if (ret > 0) {
+               ret = -ENOENT;
+               goto release_out;
+       }
+
+       btrfs_item_key_to_cpu(path.nodes[0], &key, path.slots[0]);
+       ei = btrfs_item_ptr(path.nodes[0], path.slots[0],
+                           struct btrfs_extent_item);
+       flags = btrfs_extent_flags(path.nodes[0], ei);
+       if (!(flags & BTRFS_EXTENT_FLAG_TREE_BLOCK)) {
+               ret = -ENOENT;
+               goto release_out;
+       }
+
+       /* Get transid for later read_tree_block() check */
+       transid = btrfs_extent_generation(path.nodes[0], ei);
+
+       /* Get backref level as one source */
+       if (key.type == BTRFS_METADATA_ITEM_KEY) {
+               backref_level = key.offset;
+       } else {
+               struct btrfs_tree_block_info *info;
+
+               info = (struct btrfs_tree_block_info *)(ei + 1);
+               backref_level = btrfs_tree_block_level(path.nodes[0], info);
+       }
+       btrfs_release_path(&path);
+
+       /* Get level from tree block as an alternative source */
+       eb = read_tree_block_fs_info(fs_info, bytenr, nodesize, transid);
+       if (!extent_buffer_uptodate(eb)) {
+               free_extent_buffer(eb);
+               return -EIO;
+       }
+       header_level = btrfs_header_level(eb);
+       free_extent_buffer(eb);
+
+       if (header_level != backref_level)
+               return -EIO;
+       return header_level;
+
+release_out:
+       btrfs_release_path(&path);
+       return ret;
+}
+
+/*
+ * Check if a tree block backref is valid (points to a valid tree block)
+ * if level == -1, level will be resolved
+ * Return >0 for any error found and print error message
+ */
+static int check_tree_block_backref(struct btrfs_fs_info *fs_info, u64 root_id,
+                                   u64 bytenr, int level)
+{
+       struct btrfs_root *root;
+       struct btrfs_key key;
+       struct btrfs_path path;
+       struct extent_buffer *eb;
+       struct extent_buffer *node;
+       u32 nodesize = btrfs_super_nodesize(fs_info->super_copy);
+       int err = 0;
+       int ret;
+
+       /* Query level for level == -1 special case */
+       if (level == -1)
+               level = query_tree_block_level(fs_info, bytenr);
+       if (level < 0) {
+               err |= REFERENCER_MISSING;
+               goto out;
+       }
+
+       key.objectid = root_id;
+       key.type = BTRFS_ROOT_ITEM_KEY;
+       key.offset = (u64)-1;
+
+       root = btrfs_read_fs_root(fs_info, &key);
+       if (IS_ERR(root)) {
+               err |= REFERENCER_MISSING;
+               goto out;
+       }
+
+       /* Read out the tree block to get item/node key */
+       eb = read_tree_block(root, bytenr, root->nodesize, 0);
+       if (!extent_buffer_uptodate(eb)) {
+               err |= REFERENCER_MISSING;
+               free_extent_buffer(eb);
+               goto out;
+       }
+
+       /* Empty tree, no need to check key */
+       if (!btrfs_header_nritems(eb) && !level) {
+               free_extent_buffer(eb);
+               goto out;
+       }
+
+       if (level)
+               btrfs_node_key_to_cpu(eb, &key, 0);
+       else
+               btrfs_item_key_to_cpu(eb, &key, 0);
+
+       free_extent_buffer(eb);
+
+       btrfs_init_path(&path);
+       path.lowest_level = level;
+       /* Search with the first key, to ensure we can reach it */
+       ret = btrfs_search_slot(NULL, root, &key, &path, 0, 0);
+       if (ret < 0) {
+               err |= REFERENCER_MISSING;
+               goto release_out;
+       }
+
+       node = path.nodes[level];
+       if (btrfs_header_bytenr(node) != bytenr) {
+               error(
+       "extent [%llu %d] referencer bytenr mismatch, wanted: %llu, have: %llu",
+                       bytenr, nodesize, bytenr,
+                       btrfs_header_bytenr(node));
+               err |= REFERENCER_MISMATCH;
+       }
+       if (btrfs_header_level(node) != level) {
+               error(
+       "extent [%llu %d] referencer level mismatch, wanted: %d, have: %d",
+                       bytenr, nodesize, level,
+                       btrfs_header_level(node));
+               err |= REFERENCER_MISMATCH;
+       }
+
+release_out:
+       btrfs_release_path(&path);
+out:
+       if (err & REFERENCER_MISSING) {
+               if (level < 0)
+                       error("extent [%llu %d] lost referencer (owner: %llu)",
+                               bytenr, nodesize, root_id);
+               else
+                       error(
+               "extent [%llu %d] lost referencer (owner: %llu, level: %u)",
+                               bytenr, nodesize, root_id, level);
+       }
+
+       return err;
+}
+
+/*
+ * Check referencer for shared block backref
+ * If level == -1, this function will resolve the level.
+ */
+static int check_shared_block_backref(struct btrfs_fs_info *fs_info,
+                                    u64 parent, u64 bytenr, int level)
+{
+       struct extent_buffer *eb;
+       u32 nodesize = btrfs_super_nodesize(fs_info->super_copy);
+       u32 nr;
+       int found_parent = 0;
+       int i;
+
+       eb = read_tree_block_fs_info(fs_info, parent, nodesize, 0);
+       if (!extent_buffer_uptodate(eb))
+               goto out;
+
+       if (level == -1)
+               level = query_tree_block_level(fs_info, bytenr);
+       if (level < 0)
+               goto out;
+
+       if (level + 1 != btrfs_header_level(eb))
+               goto out;
+
+       nr = btrfs_header_nritems(eb);
+       for (i = 0; i < nr; i++) {
+               if (bytenr == btrfs_node_blockptr(eb, i)) {
+                       found_parent = 1;
+                       break;
+               }
+       }
+out:
+       free_extent_buffer(eb);
+       if (!found_parent) {
+               error(
+       "shared extent[%llu %u] lost its parent (parent: %llu, level: %u)",
+                       bytenr, nodesize, parent, level);
+               return REFERENCER_MISSING;
+       }
+       return 0;
+}
+
+/*
+ * Check referencer for normal (inlined) data ref
+ * If len == 0, it will be resolved by searching in extent tree
+ */
+static int check_extent_data_backref(struct btrfs_fs_info *fs_info,
+                                    u64 root_id, u64 objectid, u64 offset,
+                                    u64 bytenr, u64 len, u32 count)
+{
+       struct btrfs_root *root;
+       struct btrfs_root *extent_root = fs_info->extent_root;
+       struct btrfs_key key;
+       struct btrfs_path path;
+       struct extent_buffer *leaf;
+       struct btrfs_file_extent_item *fi;
+       u32 found_count = 0;
+       int slot;
+       int ret = 0;
+
+       if (!len) {
+               key.objectid = bytenr;
+               key.type = BTRFS_EXTENT_ITEM_KEY;
+               key.offset = (u64)-1;
+
+               btrfs_init_path(&path);
+               ret = btrfs_search_slot(NULL, extent_root, &key, &path, 0, 0);
+               if (ret < 0)
+                       goto out;
+               ret = btrfs_previous_extent_item(extent_root, &path, bytenr);
+               if (ret)
+                       goto out;
+               btrfs_item_key_to_cpu(path.nodes[0], &key, path.slots[0]);
+               if (key.objectid != bytenr ||
+                   key.type != BTRFS_EXTENT_ITEM_KEY)
+                       goto out;
+               len = key.offset;
+               btrfs_release_path(&path);
+       }
+       key.objectid = root_id;
+       key.type = BTRFS_ROOT_ITEM_KEY;
+       key.offset = (u64)-1;
+       btrfs_init_path(&path);
+
+       root = btrfs_read_fs_root(fs_info, &key);
+       if (IS_ERR(root))
+               goto out;
+
+       key.objectid = objectid;
+       key.type = BTRFS_EXTENT_DATA_KEY;
+       /*
+        * It can be nasty as data backref offset is
+        * file offset - file extent offset, which is smaller or
+        * equal to original backref offset.  The only special case is
+        * overflow.  So we need to special check and do further search.
+        */
+       key.offset = offset & (1ULL << 63) ? 0 : offset;
+
+       ret = btrfs_search_slot(NULL, root, &key, &path, 0, 0);
+       if (ret < 0)
+               goto out;
+
+       /*
+        * Search afterwards to get correct one
+        * NOTE: As we must do a comprehensive check on the data backref to
+        * make sure the dref count also matches, we must iterate all file
+        * extents for that inode.
+        */
+       while (1) {
+               leaf = path.nodes[0];
+               slot = path.slots[0];
+
+               btrfs_item_key_to_cpu(leaf, &key, slot);
+               if (key.objectid != objectid || key.type != BTRFS_EXTENT_DATA_KEY)
+                       break;
+               fi = btrfs_item_ptr(leaf, slot, struct btrfs_file_extent_item);
+               /*
+                * Except normal disk bytenr and disk num bytes, we still
+                * need to do extra check on dbackref offset as
+                * dbackref offset = file_offset - file_extent_offset
+                */
+               if (btrfs_file_extent_disk_bytenr(leaf, fi) == bytenr &&
+                   btrfs_file_extent_disk_num_bytes(leaf, fi) == len &&
+                   (u64)(key.offset - btrfs_file_extent_offset(leaf, fi)) ==
+                   offset)
+                       found_count++;
+
+               ret = btrfs_next_item(root, &path);
+               if (ret)
+                       break;
+       }
+out:
+       btrfs_release_path(&path);
+       if (found_count != count) {
+               error(
+"extent[%llu, %llu] referencer count mismatch (root: %llu, owner: %llu, offset: %llu) wanted: %u, have: %u",
+                       bytenr, len, root_id, objectid, offset, count, found_count);
+               return REFERENCER_MISSING;
+       }
+       return 0;
+}
+
+/*
+ * Check if the referencer of a shared data backref exists
+ */
+static int check_shared_data_backref(struct btrfs_fs_info *fs_info,
+                                    u64 parent, u64 bytenr)
+{
+       struct extent_buffer *eb;
+       struct btrfs_key key;
+       struct btrfs_file_extent_item *fi;
+       u32 nodesize = btrfs_super_nodesize(fs_info->super_copy);
+       u32 nr;
+       int found_parent = 0;
+       int i;
+
+       eb = read_tree_block_fs_info(fs_info, parent, nodesize, 0);
+       if (!extent_buffer_uptodate(eb))
+               goto out;
+
+       nr = btrfs_header_nritems(eb);
+       for (i = 0; i < nr; i++) {
+               btrfs_item_key_to_cpu(eb, &key, i);
+               if (key.type != BTRFS_EXTENT_DATA_KEY)
+                       continue;
+
+               fi = btrfs_item_ptr(eb, i, struct btrfs_file_extent_item);
+               if (btrfs_file_extent_type(eb, fi) == BTRFS_FILE_EXTENT_INLINE)
+                       continue;
+
+               if (btrfs_file_extent_disk_bytenr(eb, fi) == bytenr) {
+                       found_parent = 1;
+                       break;
+               }
+       }
+
+out:
+       free_extent_buffer(eb);
+       if (!found_parent) {
+               error("shared extent %llu referencer lost (parent: %llu)",
+                       bytenr, parent);
+               return REFERENCER_MISSING;
+       }
+       return 0;
+}
+
+/*
+ * This function will check a given extent item, including its backref and
+ * itself (like crossing stripe boundary and type)
+ *
+ * Since we don't use extent_record anymore, introduce new error bit
+ */
+static int check_extent_item(struct btrfs_fs_info *fs_info,
+                            struct extent_buffer *eb, int slot)
+{
+       struct btrfs_extent_item *ei;
+       struct btrfs_extent_inline_ref *iref;
+       struct btrfs_extent_data_ref *dref;
+       unsigned long end;
+       unsigned long ptr;
+       int type;
+       u32 nodesize = btrfs_super_nodesize(fs_info->super_copy);
+       u32 item_size = btrfs_item_size_nr(eb, slot);
+       u64 flags;
+       u64 offset;
+       int metadata = 0;
+       int level;
+       struct btrfs_key key;
+       int ret;
+       int err = 0;
+
+       btrfs_item_key_to_cpu(eb, &key, slot);
+       if (key.type == BTRFS_EXTENT_ITEM_KEY)
+               bytes_used += key.offset;
+       else
+               bytes_used += nodesize;
+
+       if (item_size < sizeof(*ei)) {
+               /*
+                * COMPAT_EXTENT_TREE_V0 case, but it's already a super
+                * old thing when on disk format is still un-determined.
+                * No need to care about it anymore
+                */
+               error("unsupported COMPAT_EXTENT_TREE_V0 detected");
+               return -ENOTTY;
+       }
+
+       ei = btrfs_item_ptr(eb, slot, struct btrfs_extent_item);
+       flags = btrfs_extent_flags(eb, ei);
+
+       if (flags & BTRFS_EXTENT_FLAG_TREE_BLOCK)
+               metadata = 1;
+       if (metadata && check_crossing_stripes(key.objectid, eb->len)) {
+               error("bad metadata [%llu, %llu) crossing stripe boundary",
+                     key.objectid, key.objectid + nodesize);
+               err |= CROSSING_STRIPE_BOUNDARY;
+       }
+
+       ptr = (unsigned long)(ei + 1);
+
+       if (metadata && key.type == BTRFS_EXTENT_ITEM_KEY) {
+               /* Old EXTENT_ITEM metadata */
+               struct btrfs_tree_block_info *info;
+
+               info = (struct btrfs_tree_block_info *)ptr;
+               level = btrfs_tree_block_level(eb, info);
+               ptr += sizeof(struct btrfs_tree_block_info);
+       } else {
+               /* New METADATA_ITEM */
+               level = key.offset;
+       }
+       end = (unsigned long)ei + item_size;
+
+       if (ptr >= end) {
+               err |= ITEM_SIZE_MISMATCH;
+               goto out;
+       }
+
+       /* Now check every backref in this extent item */
+next:
+       iref = (struct btrfs_extent_inline_ref *)ptr;
+       type = btrfs_extent_inline_ref_type(eb, iref);
+       offset = btrfs_extent_inline_ref_offset(eb, iref);
+       switch (type) {
+       case BTRFS_TREE_BLOCK_REF_KEY:
+               ret = check_tree_block_backref(fs_info, offset, key.objectid,
+                                              level);
+               err |= ret;
+               break;
+       case BTRFS_SHARED_BLOCK_REF_KEY:
+               ret = check_shared_block_backref(fs_info, offset, key.objectid,
+                                                level);
+               err |= ret;
+               break;
+       case BTRFS_EXTENT_DATA_REF_KEY:
+               dref = (struct btrfs_extent_data_ref *)(&iref->offset);
+               ret = check_extent_data_backref(fs_info,
+                               btrfs_extent_data_ref_root(eb, dref),
+                               btrfs_extent_data_ref_objectid(eb, dref),
+                               btrfs_extent_data_ref_offset(eb, dref),
+                               key.objectid, key.offset,
+                               btrfs_extent_data_ref_count(eb, dref));
+               err |= ret;
+               break;
+       case BTRFS_SHARED_DATA_REF_KEY:
+               ret = check_shared_data_backref(fs_info, offset, key.objectid);
+               err |= ret;
+               break;
+       default:
+               error("extent[%llu %d %llu] has unknown ref type: %d",
+                       key.objectid, key.type, key.offset, type);
+               err |= UNKNOWN_TYPE;
+               goto out;
+       }
+
+       ptr += btrfs_extent_inline_ref_size(type);
+       if (ptr < end)
+               goto next;
+
+out:
+       return err;
+}
+
+/*
+ * Check if a dev extent item is referred correctly by its chunk
+ */
+static int check_dev_extent_item(struct btrfs_fs_info *fs_info,
+                                struct extent_buffer *eb, int slot)
+{
+       struct btrfs_root *chunk_root = fs_info->chunk_root;
+       struct btrfs_dev_extent *ptr;
+       struct btrfs_path path;
+       struct btrfs_key chunk_key;
+       struct btrfs_key devext_key;
+       struct btrfs_chunk *chunk;
+       struct extent_buffer *l;
+       int num_stripes;
+       u64 length;
+       int i;
+       int found_chunk = 0;
+       int ret;
+
+       btrfs_item_key_to_cpu(eb, &devext_key, slot);
+       ptr = btrfs_item_ptr(eb, slot, struct btrfs_dev_extent);
+       length = btrfs_dev_extent_length(eb, ptr);
+
+       chunk_key.objectid = btrfs_dev_extent_chunk_objectid(eb, ptr);
+       chunk_key.type = BTRFS_CHUNK_ITEM_KEY;
+       chunk_key.offset = btrfs_dev_extent_chunk_offset(eb, ptr);
+
+       btrfs_init_path(&path);
+       ret = btrfs_search_slot(NULL, chunk_root, &chunk_key, &path, 0, 0);
+       if (ret)
+               goto out;
+
+       l = path.nodes[0];
+       chunk = btrfs_item_ptr(l, path.slots[0], struct btrfs_chunk);
+       if (btrfs_chunk_length(l, chunk) != length)
+               goto out;
+
+       num_stripes = btrfs_chunk_num_stripes(l, chunk);
+       for (i = 0; i < num_stripes; i++) {
+               u64 devid = btrfs_stripe_devid_nr(l, chunk, i);
+               u64 offset = btrfs_stripe_offset_nr(l, chunk, i);
+
+               if (devid == devext_key.objectid &&
+                   offset == devext_key.offset) {
+                       found_chunk = 1;
+                       break;
+               }
+       }
+out:
+       btrfs_release_path(&path);
+       if (!found_chunk) {
+               error(
+               "device extent[%llu, %llu, %llu] did not find the related chunk",
+                       devext_key.objectid, devext_key.offset, length);
+               return REFERENCER_MISSING;
+       }
+       return 0;
+}
+
+/*
+ * Check if the used space is correct with the dev item
+ */
+static int check_dev_item(struct btrfs_fs_info *fs_info,
+                         struct extent_buffer *eb, int slot)
+{
+       struct btrfs_root *dev_root = fs_info->dev_root;
+       struct btrfs_dev_item *dev_item;
+       struct btrfs_path path;
+       struct btrfs_key key;
+       struct btrfs_dev_extent *ptr;
+       u64 dev_id;
+       u64 used;
+       u64 total = 0;
+       int ret;
+
+       dev_item = btrfs_item_ptr(eb, slot, struct btrfs_dev_item);
+       dev_id = btrfs_device_id(eb, dev_item);
+       used = btrfs_device_bytes_used(eb, dev_item);
+
+       key.objectid = dev_id;
+       key.type = BTRFS_DEV_EXTENT_KEY;
+       key.offset = 0;
+
+       btrfs_init_path(&path);
+       ret = btrfs_search_slot(NULL, dev_root, &key, &path, 0, 0);
+       if (ret < 0) {
+               btrfs_item_key_to_cpu(eb, &key, slot);
+               error("cannot find any related dev extent for dev[%llu, %u, %llu]",
+                       key.objectid, key.type, key.offset);
+               btrfs_release_path(&path);
+               return REFERENCER_MISSING;
+       }
+
+       /* Iterate dev_extents to calculate the used space of a device */
+       while (1) {
+               btrfs_item_key_to_cpu(path.nodes[0], &key, path.slots[0]);
+
+               if (key.objectid > dev_id)
+                       break;
+               if (key.type != BTRFS_DEV_EXTENT_KEY || key.objectid != dev_id)
+                       goto next;
+
+               ptr = btrfs_item_ptr(path.nodes[0], path.slots[0],
+                                    struct btrfs_dev_extent);
+               total += btrfs_dev_extent_length(path.nodes[0], ptr);
+next:
+               ret = btrfs_next_item(dev_root, &path);
+               if (ret)
+                       break;
+       }
+       btrfs_release_path(&path);
+
+       if (used != total) {
+               btrfs_item_key_to_cpu(eb, &key, slot);
+               error(
+"Dev extent's total-byte %llu is not equal to bytes-used %llu in dev[%llu, %u, %llu]",
+                       total, used, BTRFS_ROOT_TREE_OBJECTID,
+                       BTRFS_DEV_EXTENT_KEY, dev_id);
+               return ACCOUNTING_MISMATCH;
+       }
+       return 0;
+}
+
+/*
+ * Check a block group item with its referener (chunk) and its used space
+ * with extent/metadata item
+ */
+static int check_block_group_item(struct btrfs_fs_info *fs_info,
+                                 struct extent_buffer *eb, int slot)
+{
+       struct btrfs_root *extent_root = fs_info->extent_root;
+       struct btrfs_root *chunk_root = fs_info->chunk_root;
+       struct btrfs_block_group_item *bi;
+       struct btrfs_block_group_item bg_item;
+       struct btrfs_path path;
+       struct btrfs_key bg_key;
+       struct btrfs_key chunk_key;
+       struct btrfs_key extent_key;
+       struct btrfs_chunk *chunk;
+       struct extent_buffer *leaf;
+       struct btrfs_extent_item *ei;
+       u32 nodesize = btrfs_super_nodesize(fs_info->super_copy);
+       u64 flags;
+       u64 bg_flags;
+       u64 used;
+       u64 total = 0;
+       int ret;
+       int err = 0;
+
+       btrfs_item_key_to_cpu(eb, &bg_key, slot);
+       bi = btrfs_item_ptr(eb, slot, struct btrfs_block_group_item);
+       read_extent_buffer(eb, &bg_item, (unsigned long)bi, sizeof(bg_item));
+       used = btrfs_block_group_used(&bg_item);
+       bg_flags = btrfs_block_group_flags(&bg_item);
+
+       chunk_key.objectid = BTRFS_FIRST_CHUNK_TREE_OBJECTID;
+       chunk_key.type = BTRFS_CHUNK_ITEM_KEY;
+       chunk_key.offset = bg_key.objectid;
+
+       btrfs_init_path(&path);
+       /* Search for the referencer chunk */
+       ret = btrfs_search_slot(NULL, chunk_root, &chunk_key, &path, 0, 0);
+       if (ret) {
+               error(
+               "block group[%llu %llu] did not find the related chunk item",
+                       bg_key.objectid, bg_key.offset);
+               err |= REFERENCER_MISSING;
+       } else {
+               chunk = btrfs_item_ptr(path.nodes[0], path.slots[0],
+                                       struct btrfs_chunk);
+               if (btrfs_chunk_length(path.nodes[0], chunk) !=
+                                               bg_key.offset) {
+                       error(
+       "block group[%llu %llu] related chunk item length does not match",
+                               bg_key.objectid, bg_key.offset);
+                       err |= REFERENCER_MISMATCH;
+               }
+       }
+       btrfs_release_path(&path);
+
+       /* Search from the block group bytenr */
+       extent_key.objectid = bg_key.objectid;
+       extent_key.type = 0;
+       extent_key.offset = 0;
+
+       btrfs_init_path(&path);
+       ret = btrfs_search_slot(NULL, extent_root, &extent_key, &path, 0, 0);
+       if (ret < 0)
+               goto out;
+
+       /* Iterate extent tree to account used space */
+       while (1) {
+               leaf = path.nodes[0];
+               btrfs_item_key_to_cpu(leaf, &extent_key, path.slots[0]);
+               if (extent_key.objectid >= bg_key.objectid + bg_key.offset)
+                       break;
+
+               if (extent_key.type != BTRFS_METADATA_ITEM_KEY &&
+                   extent_key.type != BTRFS_EXTENT_ITEM_KEY)
+                       goto next;
+               if (extent_key.objectid < bg_key.objectid)
+                       goto next;
+
+               if (extent_key.type == BTRFS_METADATA_ITEM_KEY)
+                       total += nodesize;
+               else
+                       total += extent_key.offset;
+
+               ei = btrfs_item_ptr(leaf, path.slots[0],
+                                   struct btrfs_extent_item);
+               flags = btrfs_extent_flags(leaf, ei);
+               if (flags & BTRFS_EXTENT_FLAG_DATA) {
+                       if (!(bg_flags & BTRFS_BLOCK_GROUP_DATA)) {
+                               error(
+                       "bad extent[%llu, %llu) type mismatch with chunk",
+                                       extent_key.objectid,
+                                       extent_key.objectid + extent_key.offset);
+                               err |= CHUNK_TYPE_MISMATCH;
+                       }
+               } else if (flags & BTRFS_EXTENT_FLAG_TREE_BLOCK) {
+                       if (!(bg_flags & (BTRFS_BLOCK_GROUP_SYSTEM |
+                                   BTRFS_BLOCK_GROUP_METADATA))) {
+                               error(
+                       "bad extent[%llu, %llu) type mismatch with chunk",
+                                       extent_key.objectid,
+                                       extent_key.objectid + nodesize);
+                               err |= CHUNK_TYPE_MISMATCH;
+                       }
+               }
+next:
+               ret = btrfs_next_item(extent_root, &path);
+               if (ret)
+                       break;
+       }
+
+out:
+       btrfs_release_path(&path);
+
+       if (total != used) {
+               error(
+               "block group[%llu %llu] used %llu but extent items used %llu",
+                       bg_key.objectid, bg_key.offset, used, total);
+               err |= ACCOUNTING_MISMATCH;
+       }
+       return err;
+}
+
+/*
+ * Check a chunk item.
+ * Including checking all referred dev_extents and block group
+ */
+static int check_chunk_item(struct btrfs_fs_info *fs_info,
+                           struct extent_buffer *eb, int slot)
+{
+       struct btrfs_root *extent_root = fs_info->extent_root;
+       struct btrfs_root *dev_root = fs_info->dev_root;
+       struct btrfs_path path;
+       struct btrfs_key chunk_key;
+       struct btrfs_key bg_key;
+       struct btrfs_key devext_key;
+       struct btrfs_chunk *chunk;
+       struct extent_buffer *leaf;
+       struct btrfs_block_group_item *bi;
+       struct btrfs_block_group_item bg_item;
+       struct btrfs_dev_extent *ptr;
+       u32 sectorsize = btrfs_super_sectorsize(fs_info->super_copy);
+       u64 length;
+       u64 chunk_end;
+       u64 type;
+       u64 profile;
+       int num_stripes;
+       u64 offset;
+       u64 objectid;
+       int i;
+       int ret;
+       int err = 0;
+
+       btrfs_item_key_to_cpu(eb, &chunk_key, slot);
+       chunk = btrfs_item_ptr(eb, slot, struct btrfs_chunk);
+       length = btrfs_chunk_length(eb, chunk);
+       chunk_end = chunk_key.offset + length;
+       if (!IS_ALIGNED(length, sectorsize)) {
+               error("chunk[%llu %llu) not aligned to %u",
+                       chunk_key.offset, chunk_end, sectorsize);
+               err |= BYTES_UNALIGNED;
+               goto out;
+       }
+
+       type = btrfs_chunk_type(eb, chunk);
+       profile = type & BTRFS_BLOCK_GROUP_PROFILE_MASK;
+       if (!(type & BTRFS_BLOCK_GROUP_TYPE_MASK)) {
+               error("chunk[%llu %llu) has no chunk type",
+                       chunk_key.offset, chunk_end);
+               err |= UNKNOWN_TYPE;
+       }
+       if (profile && (profile & (profile - 1))) {
+               error("chunk[%llu %llu) multiple profiles detected: %llx",
+                       chunk_key.offset, chunk_end, profile);
+               err |= UNKNOWN_TYPE;
+       }
+
+       bg_key.objectid = chunk_key.offset;
+       bg_key.type = BTRFS_BLOCK_GROUP_ITEM_KEY;
+       bg_key.offset = length;
+
+       btrfs_init_path(&path);
+       ret = btrfs_search_slot(NULL, extent_root, &bg_key, &path, 0, 0);
+       if (ret) {
+               error(
+               "chunk[%llu %llu) did not find the related block group item",
+                       chunk_key.offset, chunk_end);
+               err |= REFERENCER_MISSING;
+       } else{
+               leaf = path.nodes[0];
+               bi = btrfs_item_ptr(leaf, path.slots[0],
+                                   struct btrfs_block_group_item);
+               read_extent_buffer(leaf, &bg_item, (unsigned long)bi,
+                                  sizeof(bg_item));
+               if (btrfs_block_group_flags(&bg_item) != type) {
+                       error(
+"chunk[%llu %llu) related block group item flags mismatch, wanted: %llu, have: %llu",
+                               chunk_key.offset, chunk_end, type,
+                               btrfs_block_group_flags(&bg_item));
+                       err |= REFERENCER_MISSING;
+               }
+       }
+
+       num_stripes = btrfs_chunk_num_stripes(eb, chunk);
+       for (i = 0; i < num_stripes; i++) {
+               btrfs_release_path(&path);
+               btrfs_init_path(&path);
+               devext_key.objectid = btrfs_stripe_devid_nr(eb, chunk, i);
+               devext_key.type = BTRFS_DEV_EXTENT_KEY;
+               devext_key.offset = btrfs_stripe_offset_nr(eb, chunk, i);
+
+               ret = btrfs_search_slot(NULL, dev_root, &devext_key, &path,
+                                       0, 0);
+               if (ret)
+                       goto not_match_dev;
+
+               leaf = path.nodes[0];
+               ptr = btrfs_item_ptr(leaf, path.slots[0],
+                                    struct btrfs_dev_extent);
+               objectid = btrfs_dev_extent_chunk_objectid(leaf, ptr);
+               offset = btrfs_dev_extent_chunk_offset(leaf, ptr);
+               if (objectid != chunk_key.objectid ||
+                   offset != chunk_key.offset ||
+                   btrfs_dev_extent_length(leaf, ptr) != length)
+                       goto not_match_dev;
+               continue;
+not_match_dev:
+               err |= BACKREF_MISSING;
+               error(
+               "chunk[%llu %llu) stripe %d did not find the related dev extent",
+                       chunk_key.objectid, chunk_end, i);
+               continue;
+       }
+       btrfs_release_path(&path);
+out:
+       return err;
+}
+
+/*
+ * Main entry function to check known items and update related accounting info
+ */
+static int check_leaf_items(struct btrfs_root *root, struct extent_buffer *eb)
+{
+       struct btrfs_fs_info *fs_info = root->fs_info;
+       struct btrfs_key key;
+       int slot = 0;
+       int type;
+       struct btrfs_extent_data_ref *dref;
+       int ret;
+       int err = 0;
+
+next:
+       btrfs_item_key_to_cpu(eb, &key, slot);
+       type = key.type;
+
+       switch (type) {
+       case BTRFS_EXTENT_DATA_KEY:
+               ret = check_extent_data_item(root, eb, slot);
+               err |= ret;
+               break;
+       case BTRFS_BLOCK_GROUP_ITEM_KEY:
+               ret = check_block_group_item(fs_info, eb, slot);
+               err |= ret;
+               break;
+       case BTRFS_DEV_ITEM_KEY:
+               ret = check_dev_item(fs_info, eb, slot);
+               err |= ret;
+               break;
+       case BTRFS_CHUNK_ITEM_KEY:
+               ret = check_chunk_item(fs_info, eb, slot);
+               err |= ret;
+               break;
+       case BTRFS_DEV_EXTENT_KEY:
+               ret = check_dev_extent_item(fs_info, eb, slot);
+               err |= ret;
+               break;
+       case BTRFS_EXTENT_ITEM_KEY:
+       case BTRFS_METADATA_ITEM_KEY:
+               ret = check_extent_item(fs_info, eb, slot);
+               err |= ret;
+               break;
+       case BTRFS_EXTENT_CSUM_KEY:
+               total_csum_bytes += btrfs_item_size_nr(eb, slot);
+               break;
+       case BTRFS_TREE_BLOCK_REF_KEY:
+               ret = check_tree_block_backref(fs_info, key.offset,
+                                              key.objectid, -1);
+               err |= ret;
+               break;
+       case BTRFS_EXTENT_DATA_REF_KEY:
+               dref = btrfs_item_ptr(eb, slot, struct btrfs_extent_data_ref);
+               ret = check_extent_data_backref(fs_info,
+                               btrfs_extent_data_ref_root(eb, dref),
+                               btrfs_extent_data_ref_objectid(eb, dref),
+                               btrfs_extent_data_ref_offset(eb, dref),
+                               key.objectid, 0,
+                               btrfs_extent_data_ref_count(eb, dref));
+               err |= ret;
+               break;
+       case BTRFS_SHARED_BLOCK_REF_KEY:
+               ret = check_shared_block_backref(fs_info, key.offset,
+                                                key.objectid, -1);
+               err |= ret;
+               break;
+       case BTRFS_SHARED_DATA_REF_KEY:
+               ret = check_shared_data_backref(fs_info, key.offset,
+                                               key.objectid);
+               err |= ret;
+               break;
+       default:
+               break;
+       }
+
+       if (++slot < btrfs_header_nritems(eb))
+               goto next;
+
+       return err;
+}
+
+/*
+ * Helper function for later fs/subvol tree check.  To determine if a tree
+ * block should be checked.
+ * This function will ensure only the direct referencer with lowest rootid to
+ * check a fs/subvolume tree block.
+ *
+ * Backref check at extent tree would detect errors like missing subvolume
+ * tree, so we can do aggressive check to reduce duplicated checks.
+ */
+static int should_check(struct btrfs_root *root, struct extent_buffer *eb)
+{
+       struct btrfs_root *extent_root = root->fs_info->extent_root;
+       struct btrfs_key key;
+       struct btrfs_path path;
+       struct extent_buffer *leaf;
+       int slot;
+       struct btrfs_extent_item *ei;
+       unsigned long ptr;
+       unsigned long end;
+       int type;
+       u32 item_size;
+       u64 offset;
+       struct btrfs_extent_inline_ref *iref;
+       int ret;
+
+       btrfs_init_path(&path);
+       key.objectid = btrfs_header_bytenr(eb);
+       key.type = BTRFS_METADATA_ITEM_KEY;
+       key.offset = (u64)-1;
+
+       /*
+        * Any failure in backref resolving means we can't determine
+        * whom the tree block belongs to.
+        * So in that case, we need to check that tree block
+        */
+       ret = btrfs_search_slot(NULL, extent_root, &key, &path, 0, 0);
+       if (ret < 0)
+               goto need_check;
+
+       ret = btrfs_previous_extent_item(extent_root, &path,
+                                        btrfs_header_bytenr(eb));
+       if (ret)
+               goto need_check;
+
+       leaf = path.nodes[0];
+       slot = path.slots[0];
+       btrfs_item_key_to_cpu(leaf, &key, slot);
+       ei = btrfs_item_ptr(leaf, slot, struct btrfs_extent_item);
+
+       if (key.type == BTRFS_METADATA_ITEM_KEY) {
+               iref = (struct btrfs_extent_inline_ref *)(ei + 1);
+       } else {
+               struct btrfs_tree_block_info *info;
+
+               info = (struct btrfs_tree_block_info *)(ei + 1);
+               iref = (struct btrfs_extent_inline_ref *)(info + 1);
+       }
+
+       item_size = btrfs_item_size_nr(leaf, slot);
+       ptr = (unsigned long)iref;
+       end = (unsigned long)ei + item_size;
+       while (ptr < end) {
+               iref = (struct btrfs_extent_inline_ref *)ptr;
+               type = btrfs_extent_inline_ref_type(leaf, iref);
+               offset = btrfs_extent_inline_ref_offset(leaf, iref);
+
+               /*
+                * We only check the tree block if current root is
+                * the lowest referencer of it.
+                */
+               if (type == BTRFS_TREE_BLOCK_REF_KEY &&
+                   offset < root->objectid) {
+                       btrfs_release_path(&path);
+                       return 0;
+               }
+
+               ptr += btrfs_extent_inline_ref_size(type);
+       }
+       /*
+        * Normally we should also check keyed tree block ref, but that may be
+        * very time consuming.  Inlined ref should already make us skip a lot
+        * of refs now.  So skip search keyed tree block ref.
+        */
+
+need_check:
+       btrfs_release_path(&path);
+       return 1;
+}
+
+/*
+ * Traversal function for tree block. We will do:
+ * 1) Skip shared fs/subvolume tree blocks
+ * 2) Update related bytes accounting
+ * 3) Pre-order traversal
+ */
+static int traverse_tree_block(struct btrfs_root *root,
+                               struct extent_buffer *node)
+{
+       struct extent_buffer *eb;
+       struct btrfs_key key;
+       struct btrfs_key drop_key;
+       int level;
+       u64 nr;
+       int i;
+       int err = 0;
+       int ret;
+
+       /*
+        * Skip shared fs/subvolume tree block, in that case they will
+        * be checked by referencer with lowest rootid
+        */
+       if (is_fstree(root->objectid) && !should_check(root, node))
+               return 0;
+
+       /* Update bytes accounting */
+       total_btree_bytes += node->len;
+       if (fs_root_objectid(btrfs_header_owner(node)))
+               total_fs_tree_bytes += node->len;
+       if (btrfs_header_owner(node) == BTRFS_EXTENT_TREE_OBJECTID)
+               total_extent_tree_bytes += node->len;
+       if (!found_old_backref &&
+           btrfs_header_owner(node) == BTRFS_TREE_RELOC_OBJECTID &&
+           btrfs_header_backref_rev(node) == BTRFS_MIXED_BACKREF_REV &&
+           !btrfs_header_flag(node, BTRFS_HEADER_FLAG_RELOC))
+               found_old_backref = 1;
+
+       /* pre-order tranversal, check itself first */
+       level = btrfs_header_level(node);
+       ret = check_tree_block_ref(root, node, btrfs_header_bytenr(node),
+                                  btrfs_header_level(node),
+                                  btrfs_header_owner(node));
+       err |= ret;
+       if (err)
+               error(
+       "check %s failed root %llu bytenr %llu level %d, force continue check",
+                       level ? "node":"leaf", root->objectid,
+                       btrfs_header_bytenr(node), btrfs_header_level(node));
+
+       if (!level) {
+               btree_space_waste += btrfs_leaf_free_space(root, node);
+               ret = check_leaf_items(root, node);
+               err |= ret;
+               return err;
+       }
+
+       nr = btrfs_header_nritems(node);
+       btrfs_disk_key_to_cpu(&drop_key, &root->root_item.drop_progress);
+       btree_space_waste += (BTRFS_NODEPTRS_PER_BLOCK(root) - nr) *
+               sizeof(struct btrfs_key_ptr);
+
+       /* Then check all its children */
+       for (i = 0; i < nr; i++) {
+               u64 blocknr = btrfs_node_blockptr(node, i);
+
+               btrfs_node_key_to_cpu(node, &key, i);
+               if (level == root->root_item.drop_level &&
+                   is_dropped_key(&key, &drop_key))
+                       continue;
+
+               /*
+                * As a btrfs tree has most 8 levels (0..7), so it's quite safe
+                * to call the function itself.
+                */
+               eb = read_tree_block(root, blocknr, root->nodesize, 0);
+               if (extent_buffer_uptodate(eb)) {
+                       ret = traverse_tree_block(root, eb);
+                       err |= ret;
+               }
+               free_extent_buffer(eb);
+       }
+
+       return err;
+}
+
+/*
+ * Low memory usage version check_chunks_and_extents.
+ */
+static int check_chunks_and_extents_v2(struct btrfs_root *root)
+{
+       struct btrfs_path path;
+       struct btrfs_key key;
+       struct btrfs_root *root1;
+       struct btrfs_root *cur_root;
+       int err = 0;
+       int ret;
+
+       root1 = root->fs_info->chunk_root;
+       ret = traverse_tree_block(root1, root1->node);
+       err |= ret;
+
+       root1 = root->fs_info->tree_root;
+       ret = traverse_tree_block(root1, root1->node);
+       err |= ret;
+
+       btrfs_init_path(&path);
+       key.objectid = BTRFS_EXTENT_TREE_OBJECTID;
+       key.offset = 0;
+       key.type = BTRFS_ROOT_ITEM_KEY;
+
+       ret = btrfs_search_slot(NULL, root1, &key, &path, 0, 0);
+       if (ret) {
+               error("cannot find extent treet in tree_root");
+               goto out;
+       }
+
+       while (1) {
+               btrfs_item_key_to_cpu(path.nodes[0], &key, path.slots[0]);
+               if (key.type != BTRFS_ROOT_ITEM_KEY)
+                       goto next;
+               key.offset = (u64)-1;
+
+               cur_root = btrfs_read_fs_root(root->fs_info, &key);
+               if (IS_ERR(cur_root) || !cur_root) {
+                       error("failed to read tree: %lld", key.objectid);
+                       goto next;
+               }
+
+               ret = traverse_tree_block(cur_root, cur_root->node);
+               err |= ret;
+
+next:
+               ret = btrfs_next_item(root1, &path);
+               if (ret)
+                       goto out;
+       }
+
+out:
+       btrfs_release_path(&path);
+       return err;
+}
+
+static int btrfs_fsck_reinit_root(struct btrfs_trans_handle *trans,
+                          struct btrfs_root *root, int overwrite)
+{
+       struct extent_buffer *c;
+       struct extent_buffer *old = root->node;
+       int level;
+       int ret;
+       struct btrfs_disk_key disk_key = {0,0,0};
+
+       level = 0;
+
+       if (overwrite) {
+               c = old;
+               extent_buffer_get(c);
+               goto init;
+       }
+       c = btrfs_alloc_free_block(trans, root,
+                                  root->nodesize,
+                                  root->root_key.objectid,
+                                  &disk_key, level, 0, 0);
+       if (IS_ERR(c)) {
+               c = old;
+               extent_buffer_get(c);
+               overwrite = 1;
+       }
+init:
+       memset_extent_buffer(c, 0, 0, sizeof(struct btrfs_header));
+       btrfs_set_header_level(c, level);
+       btrfs_set_header_bytenr(c, c->start);
+       btrfs_set_header_generation(c, trans->transid);
+       btrfs_set_header_backref_rev(c, BTRFS_MIXED_BACKREF_REV);
+       btrfs_set_header_owner(c, root->root_key.objectid);
+
+       write_extent_buffer(c, root->fs_info->fsid,
+                           btrfs_header_fsid(), BTRFS_FSID_SIZE);
+
+       write_extent_buffer(c, root->fs_info->chunk_tree_uuid,
+                           btrfs_header_chunk_tree_uuid(c),
+                           BTRFS_UUID_SIZE);
+
+       btrfs_mark_buffer_dirty(c);
+       /*
         * this case can happen in the following case:
         *
         * 1.overwrite previous root.
@@ -9632,7 +11211,7 @@ const char * const cmd_check_usage[] = {
        "Check structural integrity of a filesystem (unmounted).",
        "Check structural integrity of an unmounted filesystem. Verify internal",
        "trees' consistency and item connectivity. In the repair mode try to",
-       "fix the problems found.",
+       "fix the problems found. ",
        "WARNING: the repair mode is considered dangerous",
        "",
        "-s|--super <superblock>     use this superblock copy",
@@ -9641,8 +11220,14 @@ const char * const cmd_check_usage[] = {
        "--readonly                  run in read-only mode (default)",
        "--init-csum-tree            create a new CRC tree",
        "--init-extent-tree          create a new extent tree",
+       "--mode <MODE>               allows choice of memory/IO trade-offs",
+       "                            where MODE is one of:",
+       "                            original - read inodes and extents to memory (requires",
+       "                                       more memory, does less IO)",
+       "                            lowmem   - try to use less memory but read blocks again",
+       "                                       when needed",
        "--check-data-csum           verify checksums of data blocks",
-       "-Q|--qgroup-report           print a report on qgroup consistency",
+       "-Q|--qgroup-report          print a report on qgroup consistency",
        "-E|--subvol-extents <subvolid>",
        "                            print subvolume extents and sharing state",
        "-r|--tree-root <bytenr>     use the given bytenr for the tree root",
@@ -9666,13 +11251,15 @@ int cmd_check(int argc, char **argv)
        int init_csum_tree = 0;
        int readonly = 0;
        int qgroup_report = 0;
-       enum btrfs_open_ctree_flags ctree_flags = OPEN_CTREE_EXCLUSIVE;
+       int qgroups_repaired = 0;
+       unsigned ctree_flags = OPEN_CTREE_EXCLUSIVE;
 
        while(1) {
                int c;
                enum { GETOPT_VAL_REPAIR = 257, GETOPT_VAL_INIT_CSUM,
                        GETOPT_VAL_INIT_EXTENT, GETOPT_VAL_CHECK_CSUM,
-                       GETOPT_VAL_READONLY, GETOPT_VAL_CHUNK_TREE };
+                       GETOPT_VAL_READONLY, GETOPT_VAL_CHUNK_TREE,
+                       GETOPT_VAL_MODE };
                static const struct option long_options[] = {
                        { "super", required_argument, NULL, 's' },
                        { "repair", no_argument, NULL, GETOPT_VAL_REPAIR },
@@ -9690,6 +11277,8 @@ int cmd_check(int argc, char **argv)
                        { "chunk-root", required_argument, NULL,
                                GETOPT_VAL_CHUNK_TREE },
                        { "progress", no_argument, NULL, 'p' },
+                       { "mode", required_argument, NULL,
+                               GETOPT_VAL_MODE },
                        { NULL, 0, NULL, 0}
                };
 
@@ -9704,8 +11293,8 @@ int cmd_check(int argc, char **argv)
                        case 's':
                                num = arg_strtou64(optarg);
                                if (num >= BTRFS_SUPER_MIRROR_MAX) {
-                                       fprintf(stderr,
-                                               "ERROR: super mirror should be less than: %d\n",
+                                       error(
+                                       "super mirror should be less than %d",
                                                BTRFS_SUPER_MIRROR_MAX);
                                        exit(1);
                                }
@@ -9754,6 +11343,13 @@ int cmd_check(int argc, char **argv)
                        case GETOPT_VAL_CHECK_CSUM:
                                check_data_csum = 1;
                                break;
+                       case GETOPT_VAL_MODE:
+                               check_mode = parse_check_mode(optarg);
+                               if (check_mode == CHECK_MODE_UNKNOWN) {
+                                       error("unknown mode: %s", optarg);
+                                       exit(1);
+                               }
+                               break;
                }
        }
 
@@ -9767,7 +11363,15 @@ int cmd_check(int argc, char **argv)
 
        /* This check is the only reason for --readonly to exist */
        if (readonly && repair) {
-               fprintf(stderr, "Repair options are not compatible with --readonly\n");
+               error("repair options are not compatible with --readonly");
+               exit(1);
+       }
+
+       /*
+        * Not supported yet
+        */
+       if (repair && check_mode == CHECK_MODE_LOWMEM) {
+               error("low memory mode doesn't support repair yet");
                exit(1);
        }
 
@@ -9775,10 +11379,10 @@ int cmd_check(int argc, char **argv)
        cache_tree_init(&root_cache);
 
        if((ret = check_mounted(argv[optind])) < 0) {
-               fprintf(stderr, "Could not check mount status: %s\n", strerror(-ret));
+               error("could not check mount status: %s", strerror(-ret));
                goto err_out;
        } else if(ret) {
-               fprintf(stderr, "%s is currently mounted. Aborting.\n", argv[optind]);
+               error("%s is currently mounted, aborting", argv[optind]);
                ret = -EBUSY;
                goto err_out;
        }
@@ -9790,7 +11394,7 @@ int cmd_check(int argc, char **argv)
        info = open_ctree_fs_info(argv[optind], bytenr, tree_root_bytenr,
                                  chunk_root_bytenr, ctree_flags);
        if (!info) {
-               fprintf(stderr, "Couldn't open file system\n");
+               error("cannot open file system");
                ret = -EIO;
                goto err_out;
        }
@@ -9803,14 +11407,14 @@ int cmd_check(int argc, char **argv)
         * will make us fail to load log tree when mounting.
         */
        if (repair && btrfs_super_log_root(info->super_copy)) {
-               ret = ask_user("repair mode will force to clear out log tree, Are you sure?");
+               ret = ask_user("repair mode will force to clear out log tree, are you sure?");
                if (!ret) {
                        ret = 1;
                        goto close_out;
                }
                ret = zero_log_tree(root);
                if (ret) {
-                       fprintf(stderr, "fail to zero log tree\n");
+                       error("failed to zero log tree: %d", ret);
                        goto close_out;
                }
        }
@@ -9821,7 +11425,7 @@ int cmd_check(int argc, char **argv)
                       uuidbuf);
                ret = qgroup_verify_all(info);
                if (ret == 0)
-                       ret = report_qgroups(1);
+                       report_qgroups(1);
                goto close_out;
        }
        if (subvolid) {
@@ -9835,7 +11439,7 @@ int cmd_check(int argc, char **argv)
        if (!extent_buffer_uptodate(info->tree_root->node) ||
            !extent_buffer_uptodate(info->dev_root->node) ||
            !extent_buffer_uptodate(info->chunk_root->node)) {
-               fprintf(stderr, "Critical roots corrupted, unable to fsck the FS\n");
+               error("critical roots corrupted, unable to check the filesystem");
                ret = -EIO;
                goto close_out;
        }
@@ -9845,7 +11449,7 @@ int cmd_check(int argc, char **argv)
 
                trans = btrfs_start_transaction(info->extent_root, 0);
                if (IS_ERR(trans)) {
-                       fprintf(stderr, "Error starting transaction\n");
+                       error("error starting transaction");
                        ret = PTR_ERR(trans);
                        goto close_out;
                }
@@ -9858,10 +11462,11 @@ int cmd_check(int argc, char **argv)
                }
 
                if (init_csum_tree) {
-                       fprintf(stderr, "Reinit crc root\n");
+                       printf("Reinitialize checksum tree\n");
                        ret = btrfs_fsck_reinit_root(trans, info->csum_root, 0);
                        if (ret) {
-                               fprintf(stderr, "crc root initialization failed\n");
+                               error("checksum tree initialization failed: %d",
+                                               ret);
                                ret = -EIO;
                                goto close_out;
                        }
@@ -9869,7 +11474,7 @@ int cmd_check(int argc, char **argv)
                        ret = fill_csum_tree(trans, info->csum_root,
                                             init_extent_tree);
                        if (ret) {
-                               fprintf(stderr, "crc refilling failed\n");
+                               error("checksum tree refilling failed: %d", ret);
                                return -EIO;
                        }
                }
@@ -9882,21 +11487,24 @@ int cmd_check(int argc, char **argv)
                        goto close_out;
        }
        if (!extent_buffer_uptodate(info->extent_root->node)) {
-               fprintf(stderr, "Critical roots corrupted, unable to fsck the FS\n");
+               error("critical: extent_root, unable to check the filesystem");
                ret = -EIO;
                goto close_out;
        }
        if (!extent_buffer_uptodate(info->csum_root->node)) {
-               fprintf(stderr, "Checksum root corrupted, rerun with --init-csum-tree option\n");
+               error("critical: csum_root, unable to check the filesystem");
                ret = -EIO;
                goto close_out;
        }
 
        if (!ctx.progress_enabled)
-               fprintf(stderr, "checking extents\n");
-       ret = check_chunks_and_extents(root);
+               printf("checking extents");
+       if (check_mode == CHECK_MODE_LOWMEM)
+               ret = check_chunks_and_extents_v2(root);
+       else
+               ret = check_chunks_and_extents(root);
        if (ret)
-               fprintf(stderr, "Errors found in extent allocation tree or chunk allocation\n");
+               printf("Errors found in extent allocation tree or chunk allocation");
 
        ret = repair_root_items(info);
        if (ret < 0)
@@ -9975,18 +11583,21 @@ int cmd_check(int argc, char **argv)
                err = qgroup_verify_all(info);
                if (err)
                        goto out;
+               report_qgroups(0);
+               err = repair_qgroups(info, &qgroups_repaired);
+               if (err)
+                       goto out;
        }
 
        if (!list_empty(&root->fs_info->recow_ebs)) {
-               fprintf(stderr, "Transid errors in file system\n");
+               error("transid errors in file system");
                ret = 1;
        }
 out:
        /* Don't override original ret */
-       if (ret)
-               report_qgroups(0);
-       else
-               ret = report_qgroups(0);
+       if (!ret && qgroups_repaired)
+               ret = qgroups_repaired;
+
        if (found_old_backref) { /*
                 * there was a disk format change when mixed
                 * backref was in testing tree. The old format