Page 1 of 1

RAW SSD partition - Bad ending head (CHS and LBA don't match)

Posted: 22 Apr 2016, 06:01
by bobbo
Hi, during a partitioning resizing operation on an external SSD (1TB Samsung 850 Pro), one of my partitions, Drive D (on Disk /dev/sdb - 1024 GB / 953 GiB - CHS 124519 255 63, sector size=512), became RAW. I'd like to recover this partition. When I run a partition search on the SSD with TestDisk, I get the message "Warning: Bad ending head (CHS and LBA don't match)" and "The harddisk (1024 GB / 953 GiB) seems too small! (< 2862 GB / 2665 GiB). The following partition can't be recovered: FAT16 >32M 254864 107 62 348014 254 51 1496464001". I'm not really sure what steps to take next to try to recover the partition. Any help would be much appreciated. Here's the log (the RAW partition has a sector size of 1486991360):



Fri Apr 22 03:56:26 2016
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1016218828800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1024209543168
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1016218828800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1024209543168
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=969551118336
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=761338591744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=260565110784
Hard disk list
Disk /dev/sda - 1016 GB / 946 GiB - CHS 123548 255 63, sector size=512
Disk /dev/sdb - 1024 GB / 953 GiB - CHS 124519 255 63, sector size=512
Drive C: - 969 GB / 902 GiB - CHS 117874 255 63, sector size=512
Drive D: - 761 GB / 709 GiB - CHS 92560 255 63, sector size=512
Drive E: - 260 GB / 242 GiB - CHS 31678 255 63, sector size=512

Partition table type (auto): EFI GPT
Disk /dev/sdb - 1024 GB / 953 GiB
Partition table type: Intel

Analyse Disk /dev/sdb - 1024 GB / 953 GiB - CHS 124519 255 63
Geometry from i386 MBR: head=256 sector=63
check_part_i386 1 type EE: no test
Current partition structure:
1 P EFI GPT 0 0 2 267349 89 4 4294967295

Warning: Bad ending head (CHS and LBA don't match)
No partition is bootable

search_part()
Disk /dev/sdb - 1024 GB / 953 GiB - CHS 124519 255 63
FAT32 at 0/32/33
FAT1 : 4326-6258
FAT2 : 6259-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-1986559
sectors : 1986560
cluster_size : 8
no_of_cluster : 247296 (2 - 247297)
fat_length 1933 calculated 1933

FAT32 at 0/32/33
FAT32 0 32 33 123 200 13 1986560 [SONYSYS]
FAT32, blocksize=4096, 1017 MB / 970 MiB
NTFS at 123/200/14
filesystem size 1720320
sectors_per_cluster 8
mft_lcn 71680
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 123 200 14 230 221 55 1720320
NTFS, blocksize=4096, 880 MB / 840 MiB
FAT32 at 230/221/56
FAT1 : 8318-12350
FAT2 : 12351-16383
start_rootdir : 16384 root cluster : 2
Data : 16384-532479
sectors : 532480
cluster_size : 1
no_of_cluster : 516096 (2 - 516097)
fat_length 4033 calculated 4033
set_FAT_info: name from BS used

FAT32 at 230/221/56
FAT32 230 221 56 264 3 59 532480 [NO NAME]
FAT32, blocksize=512, 272 MB / 260 MiB
NTFS at 280/84/61
filesystem size 1486989437
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 280 84 61 92841 36 56 1486989437
NTFS, blocksize=4096, 761 GB / 709 GiB
BAD_RS LBA=4094396962 7245728
file_pread(5,3,buffer,4094396962(254864/107/62)) lseek err Invalid argument
file_pread(5,1,buffer,4094396962(254864/107/62)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 06
FAT16 >32M 254864 107 62 348014 254 51 1496464001
This partition ends after the disk limits. (start=4094396962, size=1496464001, end=5590860962, disk end=2000409264)
file_pread(5,2,buffer,2000410624(124519/204/38)) lseek err Invalid argument
file_pread(5,1,buffer,2000410624(124519/204/38)) lseek err Invalid argument
file_pread(5,1,buffer,2000410623(124519/204/37)) lseek err Invalid argument
file_pread(5,14,buffer,2000410625(124519/204/39)) lseek err Invalid argument
file_pread(5,3,buffer,2000410639(124519/204/53)) lseek err Invalid argument
file_pread(5,3,buffer,2000410686(124519/205/37)) lseek err Invalid argument
file_pread(5,8,buffer,2000410702(124519/205/53)) lseek err Invalid argument
file_pread(5,11,buffer,2000410749(124519/206/37)) lseek err Invalid argument
file_pread(5,2,buffer,2000412671(124519/237/6)) lseek err Invalid argument
Disk /dev/sdb - 1024 GB / 953 GiB - CHS 124519 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1024 GB / 953 GiB) seems too small! (< 2862 GB / 2665 GiB)
The following partition can't be recovered:
FAT16 >32M 254864 107 62 348014 254 51 1496464001

Results
* FAT32 0 32 33 123 200 13 1986560 [SONYSYS]
FAT32, blocksize=4096, 1017 MB / 970 MiB
P HPFS - NTFS 123 200 14 230 221 55 1720320
NTFS, blocksize=4096, 880 MB / 840 MiB
P FAT32 230 221 56 264 3 59 532480 [NO NAME]
FAT32, blocksize=512, 272 MB / 260 MiB
L HPFS - NTFS 280 84 61 92841 67 26 1486991360
NTFS, blocksize=4096, 761 GB / 709 GiB
add_ext_part_i386: max
add_ext_part_i386: max

interface_write()
1 * FAT32 0 32 33 123 200 13 1986560 [SONYSYS]
2 P HPFS - NTFS 123 200 14 230 221 55 1720320
3 P FAT32 230 221 56 264 3 59 532480 [NO NAME]
4 E extended LBA 264 3 60 124519 172 5 1996167168
5 L HPFS - NTFS 280 84 61 92841 67 26 1486991360

search_part()
Disk /dev/sdb - 1024 GB / 953 GiB - CHS 124519 255 63
FAT32 at 0/32/33
FAT1 : 4326-6258
FAT2 : 6259-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-1986559
sectors : 1986560
cluster_size : 8
no_of_cluster : 247296 (2 - 247297)
fat_length 1933 calculated 1933

FAT32 at 0/32/33
FAT32 0 32 33 123 200 13 1986560 [SONYSYS]
FAT32, blocksize=4096, 1017 MB / 970 MiB
FAT32 at 0/32/39
FAT1 : 4326-6258
FAT2 : 6259-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-1986559
sectors : 1986560
cluster_size : 8
no_of_cluster : 247296 (2 - 247297)
fat_length 1933 calculated 1933
set_FAT_info: name from BS used

FAT32 at 0/32/39
FAT32 0 32 33 123 200 13 1986560 [NO NAME]
FAT32, blocksize=4096, 1017 MB / 970 MiB
NTFS at 123/200/14
filesystem size 1720320
sectors_per_cluster 8
mft_lcn 71680
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 123 200 14 230 221 55 1720320
NTFS, blocksize=4096, 880 MB / 840 MiB
NTFS at 230/221/55
filesystem size 1720320
sectors_per_cluster 8
mft_lcn 71680
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 123 200 14 230 221 55 1720320
NTFS found using backup sector, blocksize=4096, 880 MB / 840 MiB
FAT32 at 230/221/56
FAT1 : 8318-12350
FAT2 : 12351-16383
start_rootdir : 16384 root cluster : 2
Data : 16384-532479
sectors : 532480
cluster_size : 1
no_of_cluster : 516096 (2 - 516097)
fat_length 4033 calculated 4033
set_FAT_info: name from BS used

FAT32 at 230/221/56
FAT32 230 221 56 264 3 59 532480 [NO NAME]
FAT32, blocksize=512, 272 MB / 260 MiB
FAT32 at 230/221/62
FAT1 : 8318-12350
FAT2 : 12351-16383
start_rootdir : 16384 root cluster : 2
Data : 16384-532479
sectors : 532480
cluster_size : 1
no_of_cluster : 516096 (2 - 516097)
fat_length 4033 calculated 4033
set_FAT_info: name from BS used

FAT32 at 230/221/62
FAT32 230 221 56 264 3 59 532480 [NO NAME]
FAT32, blocksize=512, 272 MB / 260 MiB
NTFS at 280/84/61
filesystem size 1486989437
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 280 84 61 92841 36 56 1486989437
NTFS, blocksize=4096, 761 GB / 709 GiB

recover_EXT2: s_block_group_nr=0/92, s_mnt_count=25/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8128
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 3022844
recover_EXT2: part_size 24182752
Linux 54458 47 54 55963 126 3 24182752
ext4 blocksize=4096 Large_file Sparse_SB Recover, 12 GB / 11 GiB

recover_EXT2: s_block_group_nr=0/92, s_mnt_count=24/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8128
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 3022844
recover_EXT2: part_size 24182752
Linux 54460 25 30 55965 103 42 24182752
ext4 blocksize=4096 Large_file Sparse_SB Recover, 12 GB / 11 GiB

recover_EXT2: s_block_group_nr=0/92, s_mnt_count=17/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8128
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 3022844
recover_EXT2: part_size 24182752
Linux 54462 230 41 55968 53 53 24182752
ext4 blocksize=4096 Large_file Sparse_SB Recover, 12 GB / 11 GiB

recover_EXT2: s_block_group_nr=0/92, s_mnt_count=17/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8128
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 3022844
recover_EXT2: part_size 24182752
Linux 54463 40 42 55968 118 54 24182752
ext4 blocksize=4096 Large_file Sparse_SB Recover, 12 GB / 11 GiB
BAD_RS LBA=4094396962 7245728
file_pread(5,3,buffer,4094396962(254864/107/62)) lseek err Invalid argument
file_pread(5,1,buffer,4094396962(254864/107/62)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 06
FAT16 >32M 254864 107 62 348014 254 51 1496464001
This partition ends after the disk limits. (start=4094396962, size=1496464001, end=5590860962, disk end=2000409264)
file_pread(5,2,buffer,2000410624(124519/204/38)) lseek err Invalid argument
file_pread(5,1,buffer,2000410624(124519/204/38)) lseek err Invalid argument
file_pread(5,1,buffer,2000410623(124519/204/37)) lseek err Invalid argument
file_pread(5,14,buffer,2000410625(124519/204/39)) lseek err Invalid argument
file_pread(5,3,buffer,2000410639(124519/204/53)) lseek err Invalid argument
file_pread(5,3,buffer,2000410686(124519/205/37)) lseek err Invalid argument
file_pread(5,8,buffer,2000410702(124519/205/53)) lseek err Invalid argument
file_pread(5,11,buffer,2000410749(124519/206/37)) lseek err Invalid argument
file_pread(5,2,buffer,2000412671(124519/237/6)) lseek err Invalid argument
Disk /dev/sdb - 1024 GB / 953 GiB - CHS 124519 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1024 GB / 953 GiB) seems too small! (< 2862 GB / 2665 GiB)
The following partition can't be recovered:
FAT16 >32M 254864 107 62 348014 254 51 1496464001

Results
* FAT32 0 32 33 123 200 13 1986560 [SONYSYS]
FAT32, blocksize=4096, 1017 MB / 970 MiB
P HPFS - NTFS 123 200 14 230 221 55 1720320
NTFS, blocksize=4096, 880 MB / 840 MiB
P FAT32 230 221 56 264 3 59 532480 [NO NAME]
FAT32, blocksize=512, 272 MB / 260 MiB
HPFS - NTFS 280 84 61 92841 67 26 1486991360
NTFS, blocksize=4096, 761 GB / 709 GiB
Linux 54458 47 54 55963 126 35 24182784
ext4 blocksize=4096 Large_file Sparse_SB Recover, 12 GB / 11 GiB
Linux 54460 25 30 55965 104 11 24182784
ext4 blocksize=4096 Large_file Sparse_SB Recover, 12 GB / 11 GiB
Linux 54462 230 41 55968 54 22 24182784
ext4 blocksize=4096 Large_file Sparse_SB Recover, 12 GB / 11 GiB
Linux 54463 40 42 55968 119 23 24182784
ext4 blocksize=4096 Large_file Sparse_SB Recover, 12 GB / 11 GiB


dir_partition inode=5
P HPFS - NTFS 123 200 14 230 221 55 1720320
NTFS, blocksize=4096, 880 MB / 840 MiB
Directory /
5 dr-xr-xr-x 0 0 0 12-Apr-2015 18:04 .
5 dr-xr-xr-x 0 0 0 12-Apr-2015 18:04 ..
35 dr-xr-xr-x 0 0 0 12-Apr-2015 10:29 Recovery
38 dr-xr-xr-x 0 0 0 12-Apr-2015 01:37 System Volume Information
NTFS Volume is dirty.


dir_partition inode=5
HPFS - NTFS 280 84 61 92841 67 26 1486991360
NTFS, blocksize=4096, 761 GB / 709 GiB

Re: RAW SSD partition - Bad ending head (CHS and LBA don't match)

Posted: 22 Apr 2016, 06:14
by cgrenier
Are your files listed in the Recovery folder ?
If there is nothing usefull, you can use PhotoRec to recover your data but it will not recover the original filenames. Be carefull to store the recovered files on another disk than the source.

Re: RAW SSD partition - Bad ending head (CHS and LBA don't match)

Posted: 22 Apr 2016, 06:34
by bobbo
Thanks for the very quick reply! Sorry, please ignore this, second to last, section of the log (it's another irrelevant partition):

dir_partition inode=5
P HPFS - NTFS 123 200 14 230 221 55 1720320
NTFS, blocksize=4096, 880 MB / 840 MiB
Directory /
5 dr-xr-xr-x 0 0 0 12-Apr-2015 18:04 .
5 dr-xr-xr-x 0 0 0 12-Apr-2015 18:04 ..
35 dr-xr-xr-x 0 0 0 12-Apr-2015 10:29 Recovery
38 dr-xr-xr-x 0 0 0 12-Apr-2015 01:37 System Volume Information
NTFS Volume is dirty.

My files (ay least most of them) seem to be in the partition of size 1486991360, but it's type is listed as 'D' for deleted after a deep search, even though it is still showing up in Windows explorer, but as a RAW partition. Is there a way to restore this partition from RAW back to NTFS?