Recovering my lost Bootcamp partition

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
brooklynben
Posts: 3
Joined: 22 Oct 2021, 00:37

Recovering my lost Bootcamp partition

#1 Post by brooklynben »

Hi, I'm trying to recover files from a Bootcamp partition that vanished after trying to download the latest supporting software (via Apple's Bootcamp app).

A lot of Apple support forum posts point to testdisk and it looks like a great tool. I haven't found any post describing exactly the symptoms I'm seeing (or frankly I don't know what to search for in a more targeted way) and am looking for advice on what the issue with my partition might be and how I might recover data from it.

I tried running Testdisk Analyze (via sudo) and it found a NTFS partition called MS Data, but all partitions were marked as non recoverable:

Code: Select all

The following partitions can't be recovered:
     Mac HFS                  2697230  236529710  233832480
     HFS blocksize=16777216, 957 GB / 892 GiB
     Mac HFS                 27478935  270480322  243001387 [¾™ü„]
     HFS blocksize=16777216, 995 GB / 926 GiB
     MS Data                122138111  183162110   61024000
     NTFS, blocksize=4096, 249 GB / 232 GiB
Two other logs stood out to me:

Code: Select all

The harddisk (500 GB / 465 GiB) seems too small! (< 1107 GB / 1031 GiB)

Code: Select all

recover_EXT2: part_offset problem
NTFS at 122138111/0/1
heads/cylinder 0 (NTFS) != 1 (HD)
sect/track 0 (NTFS) != 1 (HD)
filesystem size           61024000
sectors_per_cluster       1
mft_lcn                   4
mftmirr_lcn               30511999
clusters_per_mft_record   1
clusters_per_index_record 1
     MS Data                122138111  183162110   61024000
     NTFS, blocksize=4096, 249 GB / 232 GiB
This partition ends after the disk limits. (start=122138111, size=61024000, end=183162110, disk end=122138132)
My hard drive is 512GB and the Mac OS and Windows partitions were evenly split.

Here's a longer excerpt from testdisk.log:

Code: Select all

Thu Oct 21 15:19:43 2021
Command line: TestDisk

TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Darwin, kernel 20.6.0 (Darwin Kernel Version 20.6.0: Mon Aug 30 06:12:21 PDT 2021; root:xnu-7195.141.6~3/RELEASE_X86_64) x86_64
Compiler: GCC 4.2
ext2fs lib: none, ntfs lib: none, reiserfs lib: none, ewf lib: none, curses lib: ncurses 5.7
Hard disk list
Disk /dev/disk0 - 500 GB / 465 GiB - 122138132 sectors (RO), sector size=4096
Disk /dev/rdisk0 - 500 GB / 465 GiB - 122138132 sectors (RO), sector size=4096
Disk /dev/rdisk1 - 250 GB / 232 GiB - 61037306 sectors (RO), sector size=4096

Partition table type (auto): EFI GPT
Media is opened in read-only.
Partition table type (auto): EFI GPT
Media is opened in read-only.
Partition table type (auto): EFI GPT
Media is opened in read-only.
Partition table type (auto): EFI GPT
Media is opened in read-only.
Partition table type defaults to EFI GPT
Media is opened in read-only.
Partition table type defaults to EFI GPT
Media is opened in read-only.
Partition table type (auto): EFI GPT
Media is opened in read-only.
Disk /dev/rdisk0 - 500 GB / 465 GiB (RO)
Partition table type: EFI GPT

Analyse Disk /dev/rdisk0 - 500 GB / 465 GiB - 122138132 sectors (RO)
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=122138131 (expected 122138131)
hdr_lba_start=6
hdr_lba_end=122138126
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
 1 P EFI System                     6      76805      76800 [EFI System Partition]
 2 P Apple APFS                 76806   61114111   61037306 [NoName]

search_part()
Disk /dev/rdisk0 - 500 GB / 465 GiB - 122138132 sectors (RO)
FAT32 at 6/0/1
check_FAT: Unusual media descriptor (0xf0!=0xf8)
FAT1 : 32-106
FAT2 : 107-181
start_rootdir : 182 root cluster : 2
Data : 182-76799
sectors : 76800
cluster_size : 1
no_of_cluster : 76618 (2 - 76619)
fat_length 75 calculated 75
heads/cylinder 16 (FAT) != 1 (HD)
sect/track 32 (FAT) != 1 (HD)

FAT32 at 6/0/1
     EFI System                     6      76805      76800 [EFI System Partition] [EFI]
     FAT32, blocksize=4096, 314 MB / 300 MiB

block_group_nr 7

recover_EXT2: part_offset problem

block_group_nr 9

recover_EXT2: part_offset problem

block_group_nr 9

recover_EXT2: part_offset problem

HFS magic value at 2697230/0/1
part_size 233832480
     Mac HFS                  2697230  236529710  233832480
     HFS blocksize=16777216, 957 GB / 892 GiB
This partition ends after the disk limits. (start=2697230, size=233832480, end=236529710, disk end=122138132)

recover_EXT2: s_block_group_nr=0/16, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 524288
recover_EXT2: part_size 524288
     Linux filesys. data     11341471   11865758     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB, 2147 MB / 2048 MiB

block_group_nr 5

recover_EXT2: "e2fsck -b 163840 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=5/16, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 524288
recover_EXT2: part_size 524288
     Linux filesys. data     20682296   21206583     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB

block_group_nr 3

recover_EXT2: "e2fsck -b 98304 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=3/16, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 524288
recover_EXT2: part_size 524288
     Linux filesys. data     22606816   23131103     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB

HFS magic value at 27478935/0/1
part_size 243001387
     Mac HFS                 27478935  270480322  243001387 [¾™ü„]
     HFS blocksize=16777216, 995 GB / 926 GiB
This partition ends after the disk limits. (start=27478935, size=243001387, end=270480322, disk end=122138132)

LVM magic value at 35643985/0/1

LVM magic value at 35648904/0/1

LVM magic value at 35718120/0/1

LVM magic value at 35740452/0/1

LVM magic value at 35766655/0/1

LVM magic value at 41081331/0/1

block_group_nr 3

recover_EXT2: "e2fsck -b 98304 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=3/10, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 327680
recover_EXT2: part_size 327680
     Linux filesys. data     42430019   42757698     327680 [system]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1342 MB / 1280 MiB

block_group_nr 1

recover_EXT2: "e2fsck -b 32768 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=1/16, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 524288
recover_EXT2: part_size 524288
     Linux filesys. data     43353271   43877558     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB

recover_EXT2: s_block_group_nr=0/10, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 327680
recover_EXT2: part_size 327680
     Linux filesys. data     45886872   46214551     327680 [system]
     ext4 blocksize=4096 Large_file Sparse_SB, 1342 MB / 1280 MiB

HFSX magic value at 57223141/0/1
part_size 50314
     Mac HFS                 57223141   57273454      50314
     HFSX blocksize=4096, 206 MB / 196 MiB

block_group_nr 7

recover_EXT2: "e2fsck -b 229376 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=7/16, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 524288
recover_EXT2: part_size 524288
     Linux filesys. data     58004062   58528349     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB

block_group_nr 9

recover_EXT2: "e2fsck -b 294912 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=9/16, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 524288
recover_EXT2: part_size 524288
     Linux filesys. data     60280534   60804821     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
NTFS at 122016256/0/1
heads/cylinder 255 (NTFS) != 1 (HD)
sect/track 63 (NTFS) != 1 (HD)
filesystem size           121600
sectors_per_cluster       1
mft_lcn                   40533
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                122016256  122137855     121600
     NTFS, blocksize=4096, 498 MB / 475 MiB
NTFS at 122138111/0/1
heads/cylinder 0 (NTFS) != 1 (HD)
sect/track 0 (NTFS) != 1 (HD)
filesystem size           61024000
sectors_per_cluster       1
mft_lcn                   4
mftmirr_lcn               30511999
clusters_per_mft_record   1
clusters_per_index_record 1
     MS Data                122138111  183162110   61024000
     NTFS, blocksize=4096, 249 GB / 232 GiB
This partition ends after the disk limits. (start=122138111, size=61024000, end=183162110, disk end=122138132)
Disk /dev/rdisk0 - 500 GB / 465 GiB - 122138132 sectors (RO)
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (500 GB / 465 GiB) seems too small! (< 1107 GB / 1031 GiB)
The following partitions can't be recovered:
     Mac HFS                  2697230  236529710  233832480
     HFS blocksize=16777216, 957 GB / 892 GiB
     Mac HFS                 27478935  270480322  243001387 [¾™ü„]
     HFS blocksize=16777216, 995 GB / 926 GiB
     MS Data                122138111  183162110   61024000
     NTFS, blocksize=4096, 249 GB / 232 GiB

Results
   P EFI System                     6      76805      76800 [EFI System Partition] [EFI]
     FAT32, blocksize=4096, 314 MB / 300 MiB
   P Linux filesys. data     11341471   11865758     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB, 2147 MB / 2048 MiB
   P Linux filesys. data     20682296   21206583     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
   P Linux filesys. data     22606816   23131103     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
   P Linux filesys. data     42430019   42757698     327680 [system]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1342 MB / 1280 MiB
   P Linux filesys. data     43353271   43877558     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
   P Linux filesys. data     45886872   46214551     327680 [system]
     ext4 blocksize=4096 Large_file Sparse_SB, 1342 MB / 1280 MiB
   P Mac HFS                 57223141   57273454      50314
     HFSX blocksize=4096, 206 MB / 196 MiB
   P Linux filesys. data     58004062   58528349     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
   P Linux filesys. data     60280534   60804821     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
   P MS Data                122016256  122137855     121600
     NTFS, blocksize=4096, 498 MB / 475 MiB
I have to admit that I'm a little out of my depth here and would truly appreciate any guidance or pointers for what next steps I might be able to take (not afraid of technical instructions; I just don't know where to start).

Best,
Ben

recuperation
Posts: 2720
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: Recovering my lost Bootcamp partition

#2 Post by recuperation »

Despite the information that partitions can't be recovered, I would rerun Testdisk, run analyze and try to list the files within the MS Data partition (p-key "list files"). If that fails, use Photorec.

brooklynben
Posts: 3
Joined: 22 Oct 2021, 00:37

Re: Recovering my lost Bootcamp partition

#3 Post by brooklynben »

Thanks I'll give that a shot.

brooklynben
Posts: 3
Joined: 22 Oct 2021, 00:37

Re: Recovering my lost Bootcamp partition

#4 Post by brooklynben »

When trying to list files for the MS Data partition I get the following error:

Code: Select all

Support for this filesystem wasn't enabled during compilation.
This is what the partition selection looks like:

Image

Any advice on what I might be able to do?

I installed testdisk via homebrew; does this mean I have to explicitly compile it with NTFS support?

Full log below:

Code: Select all


Thu Oct 21 15:19:43 2021
Command line: TestDisk

TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Darwin, kernel 20.6.0 (Darwin Kernel Version 20.6.0: Mon Aug 30 06:12:21 PDT 2021; root:xnu-7195.141.6~3/RELEASE_X86_64) x86_64
Compiler: GCC 4.2
ext2fs lib: none, ntfs lib: none, reiserfs lib: none, ewf lib: none, curses lib: ncurses 5.7
Hard disk list
Disk /dev/disk0 - 500 GB / 465 GiB - 122138132 sectors (RO), sector size=4096
Disk /dev/rdisk0 - 500 GB / 465 GiB - 122138132 sectors (RO), sector size=4096
Disk /dev/rdisk1 - 250 GB / 232 GiB - 61037306 sectors (RO), sector size=4096

Partition table type (auto): EFI GPT
Media is opened in read-only.
Partition table type (auto): EFI GPT
Media is opened in read-only.
Partition table type (auto): EFI GPT
Media is opened in read-only.
Partition table type (auto): EFI GPT
Media is opened in read-only.
Partition table type defaults to EFI GPT
Media is opened in read-only.
Partition table type defaults to EFI GPT
Media is opened in read-only.
Partition table type (auto): EFI GPT
Media is opened in read-only.
Disk /dev/rdisk0 - 500 GB / 465 GiB (RO)
Partition table type: EFI GPT

Analyse Disk /dev/rdisk0 - 500 GB / 465 GiB - 122138132 sectors (RO)
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=122138131 (expected 122138131)
hdr_lba_start=6
hdr_lba_end=122138126
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
 1 P EFI System                     6      76805      76800 [EFI System Partition]
 2 P Apple APFS                 76806   61114111   61037306 [NoName]

search_part()
Disk /dev/rdisk0 - 500 GB / 465 GiB - 122138132 sectors (RO)
FAT32 at 6/0/1
check_FAT: Unusual media descriptor (0xf0!=0xf8)
FAT1 : 32-106
FAT2 : 107-181
start_rootdir : 182 root cluster : 2
Data : 182-76799
sectors : 76800
cluster_size : 1
no_of_cluster : 76618 (2 - 76619)
fat_length 75 calculated 75
heads/cylinder 16 (FAT) != 1 (HD)
sect/track 32 (FAT) != 1 (HD)

FAT32 at 6/0/1
     EFI System                     6      76805      76800 [EFI System Partition] [EFI]
     FAT32, blocksize=4096, 314 MB / 300 MiB

block_group_nr 7

recover_EXT2: part_offset problem

block_group_nr 9

recover_EXT2: part_offset problem

block_group_nr 9

recover_EXT2: part_offset problem

HFS magic value at 2697230/0/1
part_size 233832480
     Mac HFS                  2697230  236529710  233832480
     HFS blocksize=16777216, 957 GB / 892 GiB
This partition ends after the disk limits. (start=2697230, size=233832480, end=236529710, disk end=122138132)

recover_EXT2: s_block_group_nr=0/16, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 524288
recover_EXT2: part_size 524288
     Linux filesys. data     11341471   11865758     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB, 2147 MB / 2048 MiB

block_group_nr 5

recover_EXT2: "e2fsck -b 163840 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=5/16, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 524288
recover_EXT2: part_size 524288
     Linux filesys. data     20682296   21206583     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB

block_group_nr 3

recover_EXT2: "e2fsck -b 98304 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=3/16, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 524288
recover_EXT2: part_size 524288
     Linux filesys. data     22606816   23131103     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB

HFS magic value at 27478935/0/1
part_size 243001387
     Mac HFS                 27478935  270480322  243001387 [¾™ü„]
     HFS blocksize=16777216, 995 GB / 926 GiB
This partition ends after the disk limits. (start=27478935, size=243001387, end=270480322, disk end=122138132)

LVM magic value at 35643985/0/1

LVM magic value at 35648904/0/1

LVM magic value at 35718120/0/1

LVM magic value at 35740452/0/1

LVM magic value at 35766655/0/1

LVM magic value at 41081331/0/1

block_group_nr 3

recover_EXT2: "e2fsck -b 98304 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=3/10, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 327680
recover_EXT2: part_size 327680
     Linux filesys. data     42430019   42757698     327680 [system]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1342 MB / 1280 MiB

block_group_nr 1

recover_EXT2: "e2fsck -b 32768 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=1/16, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 524288
recover_EXT2: part_size 524288
     Linux filesys. data     43353271   43877558     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB

recover_EXT2: s_block_group_nr=0/10, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 327680
recover_EXT2: part_size 327680
     Linux filesys. data     45886872   46214551     327680 [system]
     ext4 blocksize=4096 Large_file Sparse_SB, 1342 MB / 1280 MiB

HFSX magic value at 57223141/0/1
part_size 50314
     Mac HFS                 57223141   57273454      50314
     HFSX blocksize=4096, 206 MB / 196 MiB

block_group_nr 7

recover_EXT2: "e2fsck -b 229376 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=7/16, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 524288
recover_EXT2: part_size 524288
     Linux filesys. data     58004062   58528349     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB

block_group_nr 9

recover_EXT2: "e2fsck -b 294912 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=9/16, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 524288
recover_EXT2: part_size 524288
     Linux filesys. data     60280534   60804821     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
NTFS at 122016256/0/1
heads/cylinder 255 (NTFS) != 1 (HD)
sect/track 63 (NTFS) != 1 (HD)
filesystem size           121600
sectors_per_cluster       1
mft_lcn                   40533
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                122016256  122137855     121600
     NTFS, blocksize=4096, 498 MB / 475 MiB
NTFS at 122138111/0/1
heads/cylinder 0 (NTFS) != 1 (HD)
sect/track 0 (NTFS) != 1 (HD)
filesystem size           61024000
sectors_per_cluster       1
mft_lcn                   4
mftmirr_lcn               30511999
clusters_per_mft_record   1
clusters_per_index_record 1
     MS Data                122138111  183162110   61024000
     NTFS, blocksize=4096, 249 GB / 232 GiB
This partition ends after the disk limits. (start=122138111, size=61024000, end=183162110, disk end=122138132)
Disk /dev/rdisk0 - 500 GB / 465 GiB - 122138132 sectors (RO)
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (500 GB / 465 GiB) seems too small! (< 1107 GB / 1031 GiB)
The following partitions can't be recovered:
     Mac HFS                  2697230  236529710  233832480
     HFS blocksize=16777216, 957 GB / 892 GiB
     Mac HFS                 27478935  270480322  243001387 [¾™ü„]
     HFS blocksize=16777216, 995 GB / 926 GiB
     MS Data                122138111  183162110   61024000
     NTFS, blocksize=4096, 249 GB / 232 GiB

Results
   P EFI System                     6      76805      76800 [EFI System Partition] [EFI]
     FAT32, blocksize=4096, 314 MB / 300 MiB
   P Linux filesys. data     11341471   11865758     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB, 2147 MB / 2048 MiB
   P Linux filesys. data     20682296   21206583     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
   P Linux filesys. data     22606816   23131103     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
   P Linux filesys. data     42430019   42757698     327680 [system]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1342 MB / 1280 MiB
   P Linux filesys. data     43353271   43877558     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
   P Linux filesys. data     45886872   46214551     327680 [system]
     ext4 blocksize=4096 Large_file Sparse_SB, 1342 MB / 1280 MiB
   P Mac HFS                 57223141   57273454      50314
     HFSX blocksize=4096, 206 MB / 196 MiB
   P Linux filesys. data     58004062   58528349     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
   P Linux filesys. data     60280534   60804821     524288 [data]
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
   P MS Data                122016256  122137855     121600
     NTFS, blocksize=4096, 498 MB / 475 MiB

interface_write()
 1 P EFI System                     6      76805      76800 [EFI System Partition] [EFI]
 2 P Linux filesys. data     11341471   11865758     524288 [data]
 3 P Linux filesys. data     20682296   21206583     524288 [data]
 4 P Linux filesys. data     22606816   23131103     524288 [data]
 5 P Linux filesys. data     42430019   42757698     327680 [system]
 6 P Linux filesys. data     43353271   43877558     524288 [data]
 7 P Linux filesys. data     45886872   46214551     327680 [system]
 8 P Mac HFS                 57223141   57273454      50314
 9 P Linux filesys. data     58004062   58528349     524288 [data]
10 P Linux filesys. data     60280534   60804821     524288 [data]
11 P MS Data                122016256  122137855     121600
Don't write, no confirmation

Analyse Disk /dev/rdisk0 - 500 GB / 465 GiB - 122138132 sectors (RO)
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=122138131 (expected 122138131)
hdr_lba_start=6
hdr_lba_end=122138126
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
 1 P EFI System                     6      76805      76800 [EFI System Partition]
 2 P Apple APFS                 76806   61114111   61037306 [NoName]
Backup partition structure
partition_save

search_part()
Disk /dev/rdisk0 - 500 GB / 465 GiB - 122138132 sectors (RO)
FAT32 at 6/0/1
check_FAT: Unusual media descriptor (0xf0!=0xf8)
FAT1 : 32-106
FAT2 : 107-181
start_rootdir : 182 root cluster : 2
Data : 182-76799
sectors : 76800
cluster_size : 1
no_of_cluster : 76618 (2 - 76619)
fat_length 75 calculated 75
heads/cylinder 16 (FAT) != 1 (HD)
sect/track 32 (FAT) != 1 (HD)

FAT32 at 6/0/1
     EFI System                     6      76805      76800 [EFI System Partition] [EFI]
     FAT32, blocksize=4096, 314 MB / 300 MiB

block_group_nr 7

recover_EXT2: part_offset problem

block_group_nr 9

recover_EXT2: part_offset problem

block_group_nr 9

recover_EXT2: part_offset problem
NTFS at 122138111/0/1
heads/cylinder 0 (NTFS) != 1 (HD)
sect/track 0 (NTFS) != 1 (HD)
filesystem size           61024000
sectors_per_cluster       1
mft_lcn                   4
mftmirr_lcn               30511999
clusters_per_mft_record   1
clusters_per_index_record 1
     MS Data                122138111  183162110   61024000
     NTFS, blocksize=4096, 249 GB / 232 GiB
This partition ends after the disk limits. (start=122138111, size=61024000, end=183162110, disk end=122138132)
Search for partition aborted
Disk /dev/rdisk0 - 500 GB / 465 GiB - 122138132 sectors (RO)
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (500 GB / 465 GiB) seems too small! (< 750 GB / 698 GiB)
The following partition can't be recovered:
     MS Data                122138111  183162110   61024000
     NTFS, blocksize=4096, 249 GB / 232 GiB

Results
   P EFI System                     6      76805      76800 [EFI System Partition] [EFI]
     FAT32, blocksize=4096, 314 MB / 300 MiB
       0 0000 0000 00 00 00 00 00 00 00 00
interface_load
Disk /dev/rdisk0 - 500 GB / 465 GiB - 122138132 sectors (RO) Thu Oct 21 19:31:29 2021
       0 0000 0000 00 00 00 00 00 00 00 00
 1 P Unknown                        6      76805      76800
       0 0000 0000 00 00 00 00 00 00 00 00
 2 P Unknown                    76806   61114111   61037306
       0 0000 0000 00 00 00 00 00 00 00 00
       0 0000 0000 00 00 00 00 00 00 00 00
       0 0000 0000 00 00 00 00 00 00 00 00
       0 0000 0000 00 00 00 00 00 00 00 00
       0 0000 0000 00 00 00 00 00 00 00 00
       0 0000 0000 00 00 00 00 00 00 00 00
       0 0000 0000 00 00 00 00 00 00 00 00
       0 0000 0000 00 00 00 00 00 00 00 00
       0 0000 0000 00 00 00 00 00 00 00 00
       0 0000 0000 00 00 00 00 00 00 00 00
gpt_change_part_type
       0 0000 0000 00 00 00 00 00 00 00 00
Change partition type:
 1 P EFI System                     6      76805      76800
SIGINT detected! TestDisk has been killed.

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Recovering my lost Bootcamp partition

#5 Post by cgrenier »

Can you try TestDisk 7.2-WIP ? There is a ready to use version for macos X (x86_64 processor).

Locked