A lot of Apple support forum posts point to testdisk and it looks like a great tool. I haven't found any post describing exactly the symptoms I'm seeing (or frankly I don't know what to search for in a more targeted way) and am looking for advice on what the issue with my partition might be and how I might recover data from it.
I tried running Testdisk Analyze (via sudo) and it found a NTFS partition called MS Data, but all partitions were marked as non recoverable:
Code: Select all
The following partitions can't be recovered:
Mac HFS 2697230 236529710 233832480
HFS blocksize=16777216, 957 GB / 892 GiB
Mac HFS 27478935 270480322 243001387 [¾™ü„]
HFS blocksize=16777216, 995 GB / 926 GiB
MS Data 122138111 183162110 61024000
NTFS, blocksize=4096, 249 GB / 232 GiB
Code: Select all
The harddisk (500 GB / 465 GiB) seems too small! (< 1107 GB / 1031 GiB)
Code: Select all
recover_EXT2: part_offset problem
NTFS at 122138111/0/1
heads/cylinder 0 (NTFS) != 1 (HD)
sect/track 0 (NTFS) != 1 (HD)
filesystem size 61024000
sectors_per_cluster 1
mft_lcn 4
mftmirr_lcn 30511999
clusters_per_mft_record 1
clusters_per_index_record 1
MS Data 122138111 183162110 61024000
NTFS, blocksize=4096, 249 GB / 232 GiB
This partition ends after the disk limits. (start=122138111, size=61024000, end=183162110, disk end=122138132)
Here's a longer excerpt from testdisk.log:
Code: Select all
Thu Oct 21 15:19:43 2021
Command line: TestDisk
TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Darwin, kernel 20.6.0 (Darwin Kernel Version 20.6.0: Mon Aug 30 06:12:21 PDT 2021; root:xnu-7195.141.6~3/RELEASE_X86_64) x86_64
Compiler: GCC 4.2
ext2fs lib: none, ntfs lib: none, reiserfs lib: none, ewf lib: none, curses lib: ncurses 5.7
Hard disk list
Disk /dev/disk0 - 500 GB / 465 GiB - 122138132 sectors (RO), sector size=4096
Disk /dev/rdisk0 - 500 GB / 465 GiB - 122138132 sectors (RO), sector size=4096
Disk /dev/rdisk1 - 250 GB / 232 GiB - 61037306 sectors (RO), sector size=4096
Partition table type (auto): EFI GPT
Media is opened in read-only.
Partition table type (auto): EFI GPT
Media is opened in read-only.
Partition table type (auto): EFI GPT
Media is opened in read-only.
Partition table type (auto): EFI GPT
Media is opened in read-only.
Partition table type defaults to EFI GPT
Media is opened in read-only.
Partition table type defaults to EFI GPT
Media is opened in read-only.
Partition table type (auto): EFI GPT
Media is opened in read-only.
Disk /dev/rdisk0 - 500 GB / 465 GiB (RO)
Partition table type: EFI GPT
Analyse Disk /dev/rdisk0 - 500 GB / 465 GiB - 122138132 sectors (RO)
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=122138131 (expected 122138131)
hdr_lba_start=6
hdr_lba_end=122138126
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
1 P EFI System 6 76805 76800 [EFI System Partition]
2 P Apple APFS 76806 61114111 61037306 [NoName]
search_part()
Disk /dev/rdisk0 - 500 GB / 465 GiB - 122138132 sectors (RO)
FAT32 at 6/0/1
check_FAT: Unusual media descriptor (0xf0!=0xf8)
FAT1 : 32-106
FAT2 : 107-181
start_rootdir : 182 root cluster : 2
Data : 182-76799
sectors : 76800
cluster_size : 1
no_of_cluster : 76618 (2 - 76619)
fat_length 75 calculated 75
heads/cylinder 16 (FAT) != 1 (HD)
sect/track 32 (FAT) != 1 (HD)
FAT32 at 6/0/1
EFI System 6 76805 76800 [EFI System Partition] [EFI]
FAT32, blocksize=4096, 314 MB / 300 MiB
block_group_nr 7
recover_EXT2: part_offset problem
block_group_nr 9
recover_EXT2: part_offset problem
block_group_nr 9
recover_EXT2: part_offset problem
HFS magic value at 2697230/0/1
part_size 233832480
Mac HFS 2697230 236529710 233832480
HFS blocksize=16777216, 957 GB / 892 GiB
This partition ends after the disk limits. (start=2697230, size=233832480, end=236529710, disk end=122138132)
recover_EXT2: s_block_group_nr=0/16, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 524288
recover_EXT2: part_size 524288
Linux filesys. data 11341471 11865758 524288 [data]
ext4 blocksize=4096 Large_file Sparse_SB, 2147 MB / 2048 MiB
block_group_nr 5
recover_EXT2: "e2fsck -b 163840 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=5/16, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 524288
recover_EXT2: part_size 524288
Linux filesys. data 20682296 21206583 524288 [data]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
block_group_nr 3
recover_EXT2: "e2fsck -b 98304 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=3/16, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 524288
recover_EXT2: part_size 524288
Linux filesys. data 22606816 23131103 524288 [data]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
HFS magic value at 27478935/0/1
part_size 243001387
Mac HFS 27478935 270480322 243001387 [¾™ü„]
HFS blocksize=16777216, 995 GB / 926 GiB
This partition ends after the disk limits. (start=27478935, size=243001387, end=270480322, disk end=122138132)
LVM magic value at 35643985/0/1
LVM magic value at 35648904/0/1
LVM magic value at 35718120/0/1
LVM magic value at 35740452/0/1
LVM magic value at 35766655/0/1
LVM magic value at 41081331/0/1
block_group_nr 3
recover_EXT2: "e2fsck -b 98304 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=3/10, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 327680
recover_EXT2: part_size 327680
Linux filesys. data 42430019 42757698 327680 [system]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1342 MB / 1280 MiB
block_group_nr 1
recover_EXT2: "e2fsck -b 32768 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=1/16, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 524288
recover_EXT2: part_size 524288
Linux filesys. data 43353271 43877558 524288 [data]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
recover_EXT2: s_block_group_nr=0/10, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 327680
recover_EXT2: part_size 327680
Linux filesys. data 45886872 46214551 327680 [system]
ext4 blocksize=4096 Large_file Sparse_SB, 1342 MB / 1280 MiB
HFSX magic value at 57223141/0/1
part_size 50314
Mac HFS 57223141 57273454 50314
HFSX blocksize=4096, 206 MB / 196 MiB
block_group_nr 7
recover_EXT2: "e2fsck -b 229376 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=7/16, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 524288
recover_EXT2: part_size 524288
Linux filesys. data 58004062 58528349 524288 [data]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
block_group_nr 9
recover_EXT2: "e2fsck -b 294912 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=9/16, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 524288
recover_EXT2: part_size 524288
Linux filesys. data 60280534 60804821 524288 [data]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
NTFS at 122016256/0/1
heads/cylinder 255 (NTFS) != 1 (HD)
sect/track 63 (NTFS) != 1 (HD)
filesystem size 121600
sectors_per_cluster 1
mft_lcn 40533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 122016256 122137855 121600
NTFS, blocksize=4096, 498 MB / 475 MiB
NTFS at 122138111/0/1
heads/cylinder 0 (NTFS) != 1 (HD)
sect/track 0 (NTFS) != 1 (HD)
filesystem size 61024000
sectors_per_cluster 1
mft_lcn 4
mftmirr_lcn 30511999
clusters_per_mft_record 1
clusters_per_index_record 1
MS Data 122138111 183162110 61024000
NTFS, blocksize=4096, 249 GB / 232 GiB
This partition ends after the disk limits. (start=122138111, size=61024000, end=183162110, disk end=122138132)
Disk /dev/rdisk0 - 500 GB / 465 GiB - 122138132 sectors (RO)
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (500 GB / 465 GiB) seems too small! (< 1107 GB / 1031 GiB)
The following partitions can't be recovered:
Mac HFS 2697230 236529710 233832480
HFS blocksize=16777216, 957 GB / 892 GiB
Mac HFS 27478935 270480322 243001387 [¾™ü„]
HFS blocksize=16777216, 995 GB / 926 GiB
MS Data 122138111 183162110 61024000
NTFS, blocksize=4096, 249 GB / 232 GiB
Results
P EFI System 6 76805 76800 [EFI System Partition] [EFI]
FAT32, blocksize=4096, 314 MB / 300 MiB
P Linux filesys. data 11341471 11865758 524288 [data]
ext4 blocksize=4096 Large_file Sparse_SB, 2147 MB / 2048 MiB
P Linux filesys. data 20682296 21206583 524288 [data]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
P Linux filesys. data 22606816 23131103 524288 [data]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
P Linux filesys. data 42430019 42757698 327680 [system]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1342 MB / 1280 MiB
P Linux filesys. data 43353271 43877558 524288 [data]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
P Linux filesys. data 45886872 46214551 327680 [system]
ext4 blocksize=4096 Large_file Sparse_SB, 1342 MB / 1280 MiB
P Mac HFS 57223141 57273454 50314
HFSX blocksize=4096, 206 MB / 196 MiB
P Linux filesys. data 58004062 58528349 524288 [data]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
P Linux filesys. data 60280534 60804821 524288 [data]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 2147 MB / 2048 MiB
P MS Data 122016256 122137855 121600
NTFS, blocksize=4096, 498 MB / 475 MiB
Best,
Ben