cgsecurity.org

TestDisk & PhotoRec forum
https://forum.cgsecurity.org/phpBB3/

Will writing my MSDATA trash my LVM2 (LUKS) data on the same drive?

https://forum.cgsecurity.org/phpBB3/viewtopic.php?t=12432

Page 1 of 1

Will writing my MSDATA trash my LVM2 (LUKS) data on the same drive?

Posted: 30 Aug 2023, 09:21
by PartitionTrajic
I use Qubes operating system (linux, fedora based) booting side by side with windows. I have two SSDs. One is 256mb and the other 1tb. I boot from the smaller drive. Both operating systems are spread across both drives, with windows using the second drive for data.

I have a 1TB SSD which got the partition data overwritten. Using testdisk I can see my microsoft data and I already copied it away.My purpose was to recover about 201gb which is the second part of a logical volume for a LUKS encrypted partition. On the same drive I have a 50gb empty LUKS (apart from one file on the drive identifying it).

So, within 1TB, I have (not sure of the order)

About 600gb of Microsoft drive
50 GB useless LUKS partition
201 GB of the wanted LVM

This is what testdisk tells me about the Microsoft data:
MS Data 32768 1433632767 1433600000 [970EVO_WIN]
NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB

I found the 50gb LUKS partition by using hexdump:
aae7000000 4c 55 4b 53 ba be 00 01 61 65 73 00 00 00 00 00 |LUKS....aes.....|
aae7000000 is 734019977216 in decimal.

This is also spotted by testdisk
D Linux filesys. data 1433632768 1433636863 4096

1433632768 (in 512 byte sectors) turns into 734019977216 (byte offset) in decimal which is aae7000000 (byte offset) in


I have two questions:

1. if I write this MS data will I trash my important 201gb of data?

2. From what I have given, can I work out the location of my 201gb partition so that I can look for the header? I am not sure if this will be marked as an LVM2 partition or something else. testdisk does not seem to find it.

Re: Will writing my MSDATA trash my LVM2 (LUKS) data on the same drive?

Posted: 30 Aug 2023, 19:05
by recuperation
PartitionTrajic wrote: 30 Aug 2023, 09:21 I use Qubes operating system (linux, fedora based) booting side by side with windows. I have two SSDs. One is 256mb and the other 1tb. I boot from the smaller drive. Both operating systems are spread across both drives, with windows using the second drive for data.

I have a 1TB SSD which got the partition data overwritten. Using testdisk I can see my microsoft data and I already copied it away.My purpose was to recover about 201gb which is the second part of a logical volume for a LUKS encrypted partition.
I don't unterstand your statement about the "second part". You have a LUKS encrypted partition. There is no segmentation of this partition into any kinds of parts.
Please describe how you come to the conclusion that your data is contained in a certain location within your encrypted partition.

On the same drive I have a 50gb empty LUKS (apart from one file on the drive identifying it).

So, within 1TB, I have (not sure of the order)

About 600gb of Microsoft drive
50 GB useless LUKS partition
201 GB of the wanted LVM

This is what testdisk tells me about the Microsoft data:
Please post your complete logfile.

I have two questions:

1. if I write this MS data will I trash my important 201gb of data?
Please explain what you mean by "writing this MS data".

2. From what I have given, can I work out the location of my 201gb partition so that I can look for the header? I am not sure if this will be marked as an LVM2 partition or something else. testdisk does not seem to find it.
Testdisk is able to find both:
https://www.cgsecurity.org/wiki/TestDisk

You have a complex storage configuration involving the installation of both LVM2 and LUKS compared to a straightforward unencrypted setup just containing formated partitions. Your initial setup order when installing both operating systems determines what you should find. If you had a LUKS encrypted partition and Testdisk does not find it you are done with Testdisk.
There is nothing readable behind the header which would allow for recreation of the header such as a "backup boot sector" that exists in unencrypted partitions formated with Microsoft file systems.

"TestDisk can find lost partitions for all of these file systems:" as stated here:
https://www.cgsecurity.org/wiki/TestDisk

As I don't run such complex configurations I can only provide you with my theoretical analysis:
Testdisk does not contain a LUKS or LVM emulator.
In your case you would have to operate Testdisk from Linux and start to find the bottom layer, say LUKS on the physical device directly.
Being succesful LUKS makes the content of the partition available under a different device name. After writing the LUKS partition information to the disk you would need to mount the LUKS partition and you would be given an unencrypted differently labeled device name that you would operate on to see if there is LVM information in terms of a partition or as a file. If you fail finding the LUKS partition Testdisk can't help you anymore.

Your configuration is prone for disaster because you are operating a secret Windows operating system which does not shut down completely by design. Spreading the operating systems over both devices increases the chance of Linux destroying a Windows file system that is technically not dismounted.

Re: Will writing my MSDATA trash my LVM2 (LUKS) data on the same drive?

Posted: 31 Aug 2023, 10:59
by PartitionTrajic
Thanks for your response.

"Please post your complete logfile."

Posted at the end.

"Please explain what you mean by "writing this MS data"."

I don't care so much about the microsoft partition which testdisk is able to recover. I want to know if recovering this microsoft partition risks what I have left on the drives.

"I don't unterstand your statement about the "second part". You have a LUKS encrypted partition. There is no segmentation of this partition into any kinds of parts.
Please describe how you come to the conclusion that your data is contained in a certain location within your encrypted partition."

I found the size of the needed partition from my LVM configuration files under dracut. I have the 112.259 GB (what I call the first part) on the unaffected disk. It is the 201.335 gb LVM data (which I call the second part) which I want.

Code: Select all

		pv0 {
			id = "Wf70xv-UMGP-jq5J-CmH1-jFX4-OHGH-WZBrDX"
			device = "/dev/mapper/luks-d6c940d9-2bdd-4ebb-93e9-12b9eac24012"	# Hint only

			status = ["ALLOCATABLE"]
			flags = []
			dev_size = 235423744	# 112.259 Gigabytes
			pe_start = 2048
			pe_count = 28738	# 112.258 Gigabytes
		}

		pv1 {
			id = "4VL0R0-xnFu-FYgn-rfDt-Ntzy-chWu-E2Y9Q1"
			device = "[unknown]"	# Hint only

			status = ["ALLOCATABLE"]
			flags = ["MISSING"]
			dev_size = 422230016	# 201.335 Gigabytes
			pe_start = 2048
			pe_count = 51541	# 201.332 Gigabytes
		}
Here is the log file (continued in next post)


Code: Select all

Tue Aug 29 08:38:10 2023
Command line: TestDisk

TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Linux, kernel 6.2.9-300.fc38.x86_64 (#1 SMP PREEMPT_DYNAMIC Thu Mar 30 22:32:58 UTC 2023) x86_64
Compiler: GCC 13.0
ext2fs lib: 1.46.5, ntfs lib: libntfs-3g, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.4
Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
Hard disk list
Disk /dev/sda - 62 GB / 57 GiB - CHS 59184 64 32, sector size=512, FW:PMAP
Disk /dev/sdb - 5000 GB / 4657 GiB - CHS 4769275 64 32, sector size=512 - G-TECH ArmorATD, FW:2004
Disk /dev/mapper/live-base - 8128 MB / 7752 MiB - 15876096 sectors (RO), sector size=512
Disk /dev/mapper/live-rw - 8128 MB / 7752 MiB - 15876096 sectors, sector size=512
Disk /dev/dm-0 - 8128 MB / 7752 MiB - 15876096 sectors, sector size=512
Disk /dev/dm-1 - 8128 MB / 7752 MiB - 15876096 sectors (RO), sector size=512
Disk /dev/loop0 - 1987 MB / 1895 MiB - 3882136 sectors (RO), sector size=512
Disk /dev/loop1 - 8128 MB / 7752 MiB - 15876096 sectors (RO), sector size=512
Disk /dev/loop2 - 34 GB / 32 GiB - 67108864 sectors, sector size=512
Disk /dev/loop3 - 1073 GB / 999 GiB - 2097151488 sectors, sector size=512
Disk /dev/nvme0n1 - 256 GB / 238 GiB - CHS 244198 64 32, sector size=512
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32, sector size=512

Partition table type (auto): EFI GPT
Disk /dev/nvme1n1 - 1000 GB / 931 GiB
Partition table type: EFI GPT

Analyse Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
 1 P EFI System                  2048    1050623    1048576
 2 P Linux filesys. data      1050624   42993663   41943040
 3 P Linux filesys. data     42993664 1953523711 1910530048

search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32

HFS magic value at 95232/20/3
part_size 1401571398
     Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

Results
   P Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test0

interface_write()
 1 P Mac HFS                195035778 1596607175 1401571398

search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32

HFS magic value at 95232/20/3
part_size 1401571398
     Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

HFS magic value at 95232/20/5

HFS magic value at 95396/31/17
part_size 221396550
     Mac HFS                195372016  416768565  221396550
     HFS blocksize=67108864, 113 GB / 105 GiB

HFS magic value at 95396/31/19

LVM magic value at 104822/25/31

LVM magic value at 110961/35/2
check_FAT: Bad number of sectors per cluster

LVM magic value at 124527/24/2

LVM magic value at 126876/43/19

LVM magic value at 135492/49/29

HFS magic value at 191173/16/18
part_size 1090949124
     Mac HFS                391522833 1482471956 1090949124 [Hšˆˆh!q„a$¢@
',Ž]
     HFS blocksize=16777216, 558 GB / 520 GiB

HFS magic value at 191173/16/20

LVM magic value at 202766/23/27

HFS magic value at 214925/18/6
part_size 1317033
     Mac HFS                440166981  441484013    1317033
     HFS blocksize=16384, 674 MB / 643 MiB

HFS magic value at 214925/18/8
part_size 1317033
     Mac HFS                438849952  440166984    1317033
     HFS found using backup sector!, 674 MB / 643 MiB

LVM magic value at 225723/27/11

block_group_nr 27743

recover_EXT2: part_offset problem

block_group_nr 27743

recover_EXT2: part_offset problem

block_group_nr 27743

recover_EXT2: part_offset problem

block_group_nr 27743

recover_EXT2: part_offset problem
check_FAT: Bad number of sectors per cluster

LVM magic value at 233552/22/6

HFS magic value at 244019/17/11
part_size 366510082
     Mac HFS                499751466  866261547  366510082
     HFS blocksize=16777216, 187 GB / 174 GiB

HFS magic value at 244019/17/13
part_size 366510082
     Mac HFS                133241388  499751469  366510082
     HFS found using backup sector!, 187 GB / 174 GiB

HFS magic value at 265240/19/19
part_size 1913126914
     Mac HFS                543212146 2456339059 1913126914
     HFS blocksize=67108864, 979 GB / 912 GiB
This partition ends after the disk limits. (start=543212146, size=1913126914, end=2456339059, disk end=1953525168)

HFS magic value at 265240/19/21

HFS magic value at 317998/0/8
part_size 381810007
     Mac HFS                651259911 1033069917  381810007
     HFS blocksize=4194304, 195 GB / 182 GiB

HFS magic value at 317998/0/10
part_size 381810007
     Mac HFS                269449908  651259914  381810007
     HFS found using backup sector!, 195 GB / 182 GiB

HFS magic value at 348356/21/9
part_size 137953282
     Mac HFS                713433768  851387049  137953282
     HFS blocksize=16777216, 70 GB / 65 GiB

HFS magic value at 348356/21/11
part_size 137953282
     Mac HFS                575480490  713433771  137953282
     HFS found using backup sector!, 70 GB / 65 GiB

LVM magic value at 410177/38/6

LVM magic value at 413001/20/17

LVM magic value at 424204/35/1

HFS magic value at 436113/28/21
part_size 3522321515
     Mac HFS                893160340 4415481854 3522321515 [/‚ ]
     HFS blocksize=33554432, 1803 GB / 1679 GiB
This partition ends after the disk limits. (start=893160340, size=3522321515, end=4415481854, disk end=1953525168)

HFS magic value at 436113/28/23
check_FAT: Bad jump in FAT partition

LVM magic value at 467234/43/13

HFS magic value at 503128/11/27
part_size 1187152130
     Mac HFS               1030406522 2217558651 1187152130
     HFS blocksize=16777216, 607 GB / 566 GiB
This partition ends after the disk limits. (start=1030406522, size=1187152130, end=2217558651, disk end=1953525168)

HFS magic value at 503128/11/29

LVM magic value at 507712/43/15

HFS magic value at 517703/27/20
part_size 5965314
     Mac HFS               1060256627 1066221940    5965314
     HFS blocksize=33554432, 3054 MB / 2912 MiB

HFS magic value at 517703/27/22
part_size 5965314
     Mac HFS               1054291317 1060256630    5965314
     HFS found using backup sector!, 3054 MB / 2912 MiB

LVM magic value at 517982/58/12

LVM magic value at 518746/47/3

LVM magic value at 518791/46/9

LVM magic value at 518810/40/28

LVM magic value at 519310/51/1

LVM magic value at 520277/51/6

LVM magic value at 520456/11/6

LVM magic value at 521516/55/18

LVM magic value at 524451/50/9

LVM magic value at 524579/31/29

LVM magic value at 525018/33/23

LVM magic value at 527966/11/9

LVM magic value at 528344/12/8

LVM magic value at 528922/17/31

LVM magic value at 539503/51/20

LVM magic value at 540294/41/2

LVM magic value at 541772/23/14

LVM magic value at 541780/33/15

LVM magic value at 542071/37/15

LVM magic value at 542078/56/28

LVM magic value at 543402/13/3

LVM magic value at 544327/54/8

LVM magic value at 545313/56/17

LVM magic value at 546568/18/17

LVM magic value at 548317/4/31
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size           1433600000
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                    32768 1433632767 1433600000 [970EVO_WIN]
     NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size           1433600000
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data               1433632767 2867232766 1433600000
     NTFS, blocksize=4096, 734 GB / 683 GiB
This partition ends after the disk limits. (start=1433632767, size=1433600000, end=2867232766, disk end=1953525168)

     Linux filesys. data   1433632768 1433636863       4096
     LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 2260 GB / 2105 GiB)
The following partitions can't be recovered:
     Mac HFS                543212146 2456339059 1913126914
     HFS blocksize=67108864, 979 GB / 912 GiB
     Mac HFS                893160340 4415481854 3522321515 [/‚ ]
     HFS blocksize=33554432, 1803 GB / 1679 GiB
     Mac HFS               1030406522 2217558651 1187152130
     HFS blocksize=16777216, 607 GB / 566 GiB
     MS Data               1433632767 2867232766 1433600000
     NTFS, blocksize=4096, 734 GB / 683 GiB

Results
     MS Data                    32768 1433632767 1433600000 [970EVO_WIN]
     NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
     Mac HFS                133241388  499751469  366510082
     HFS found using backup sector!, 187 GB / 174 GiB
     Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
     Mac HFS                195372016  416768565  221396550
     HFS blocksize=67108864, 113 GB / 105 GiB
     Mac HFS                269449908  651259914  381810007
     HFS found using backup sector!, 195 GB / 182 GiB
     Mac HFS                391522833 1482471956 1090949124 [Hšˆˆh!q„a$¢@
',Ž]
     HFS blocksize=16777216, 558 GB / 520 GiB
     Mac HFS                438849952  440166984    1317033
     HFS found using backup sector!, 674 MB / 643 MiB
     Mac HFS                440166981  441484013    1317033
     HFS blocksize=16384, 674 MB / 643 MiB
     Mac HFS                499751466  866261547  366510082
     HFS blocksize=16777216, 187 GB / 174 GiB
     Mac HFS                575480490  713433771  137953282
     HFS found using backup sector!, 70 GB / 65 GiB
     Mac HFS                651259911 1033069917  381810007
     HFS blocksize=4194304, 195 GB / 182 GiB
     Mac HFS                713433768  851387049  137953282
     HFS blocksize=16777216, 70 GB / 65 GiB
     Mac HFS               1054291317 1060256630    5965314
     HFS found using backup sector!, 3054 MB / 2912 MiB
     Mac HFS               1060256627 1066221940    5965314
     HFS blocksize=33554432, 3054 MB / 2912 MiB
     Linux filesys. data   1433632768 1433636863       4096
     LUKS 1 (Data size unknown), 2097 KB / 2048 KiB

Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1433600000 linear /dev/nvme1n1 32768" | dmsetup create test0
echo "0 366510082 linear /dev/nvme1n1 133241388" | dmsetup create test1
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test2
echo "0 221396550 linear /dev/nvme1n1 195372016" | dmsetup create test3
echo "0 381810007 linear /dev/nvme1n1 269449908" | dmsetup create test4
echo "0 1090949124 linear /dev/nvme1n1 391522833" | dmsetup create test5
echo "0 1317033 linear /dev/nvme1n1 438849952" | dmsetup create test6
echo "0 1317033 linear /dev/nvme1n1 440166981" | dmsetup create test7
echo "0 366510082 linear /dev/nvme1n1 499751466" | dmsetup create test8
echo "0 137953282 linear /dev/nvme1n1 575480490" | dmsetup create test9
echo "0 381810007 linear /dev/nvme1n1 651259911" | dmsetup create test10
echo "0 137953282 linear /dev/nvme1n1 713433768" | dmsetup create test11
echo "0 5965314 linear /dev/nvme1n1 1054291317" | dmsetup create test12
echo "0 5965314 linear /dev/nvme1n1 1060256627" | dmsetup create test13
echo "0 4096 linear /dev/nvme1n1 1433632768" | dmsetup create test14

interface_write()
 
No partition found or selected for recovery
simulate write!
New options :
 Dump : No
 Align partition: Yes
 Expert mode : No
New options :
 Dump : No
 Align partition: Yes
 Expert mode : No
Partition table type (auto): EFI GPT
Disk /dev/nvme1n1 - 1000 GB / 931 GiB
Partition table type: EFI GPT

Analyse Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
 1 P EFI System                  2048    1050623    1048576
 2 P Linux filesys. data      1050624   42993663   41943040
 3 P Linux filesys. data     42993664 1953523711 1910530048

search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32

HFS magic value at 95232/20/3
part_size 1401571398
     Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

Results
   P Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test0
NTFS signature is missing.
NTFS signature is missing.
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P NTFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P FAT32                  195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB


dir_partition inode=0
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
FAT: Can't list files, bad sector size.
Directory /
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P FAT32                  195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB


dir_partition inode=0
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
FAT: Can't list files, bad sector size.
Directory /
gpt_change_part_type
Change partition type:
   P Linux filesys. data    195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P Linux LVM2             195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

interface_write()
 1 P Linux filesys. data    195035778 1596607175 1401571398

search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32

HFS magic value at 95232/20/3
part_size 1401571398
     Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

HFS magic value at 95232/20/5

HFS magic value at 95396/31/17
part_size 221396550
     Mac HFS                195372016  416768565  221396550
     HFS blocksize=67108864, 113 GB / 105 GiB

HFS magic value at 95396/31/19

LVM magic value at 104822/25/31

LVM magic value at 110961/35/2
check_FAT: Bad number of sectors per cluster

LVM magic value at 124527/24/2

LVM magic value at 126876/43/19

LVM magic value at 135492/49/29

HFS magic value at 191173/16/18
part_size 1090949124
     Mac HFS                391522833 1482471956 1090949124 [Hšˆˆh!q„a$¢@
',Ž]
     HFS blocksize=16777216, 558 GB / 520 GiB

HFS magic value at 191173/16/20

LVM magic value at 202766/23/27

HFS magic value at 214925/18/6
part_size 1317033
     Mac HFS                440166981  441484013    1317033
     HFS blocksize=16384, 674 MB / 643 MiB

HFS magic value at 214925/18/8
part_size 1317033
     Mac HFS                438849952  440166984    1317033
     HFS found using backup sector!, 674 MB / 643 MiB

LVM magic value at 225723/27/11

block_group_nr 27743

recover_EXT2: part_offset problem

block_group_nr 27743

recover_EXT2: part_offset problem

block_group_nr 27743

recover_EXT2: part_offset problem

block_group_nr 27743

recover_EXT2: part_offset problem
check_FAT: Bad number of sectors per cluster

LVM magic value at 233552/22/6

HFS magic value at 244019/17/11
part_size 366510082
     Mac HFS                499751466  866261547  366510082
     HFS blocksize=16777216, 187 GB / 174 GiB

HFS magic value at 244019/17/13
part_size 366510082
     Mac HFS                133241388  499751469  366510082
     HFS found using backup sector!, 187 GB / 174 GiB

HFS magic value at 265240/19/19
part_size 1913126914
     Mac HFS                543212146 2456339059 1913126914
     HFS blocksize=67108864, 979 GB / 912 GiB
This partition ends after the disk limits. (start=543212146, size=1913126914, end=2456339059, disk end=1953525168)

HFS magic value at 265240/19/21

HFS magic value at 317998/0/8
part_size 381810007
     Mac HFS                651259911 1033069917  381810007
     HFS blocksize=4194304, 195 GB / 182 GiB

HFS magic value at 317998/0/10
part_size 381810007
     Mac HFS                269449908  651259914  381810007
     HFS found using backup sector!, 195 GB / 182 GiB

HFS magic value at 348356/21/9
part_size 137953282
     Mac HFS                713433768  851387049  137953282
     HFS blocksize=16777216, 70 GB / 65 GiB

HFS magic value at 348356/21/11
part_size 137953282
     Mac HFS                575480490  713433771  137953282
     HFS found using backup sector!, 70 GB / 65 GiB

LVM magic value at 410177/38/6

LVM magic value at 413001/20/17

LVM magic value at 424204/35/1

HFS magic value at 436113/28/21
part_size 3522321515
     Mac HFS                893160340 4415481854 3522321515 [/‚ ]
     HFS blocksize=33554432, 1803 GB / 1679 GiB
This partition ends after the disk limits. (start=893160340, size=3522321515, end=4415481854, disk end=1953525168)

HFS magic value at 436113/28/23
check_FAT: Bad jump in FAT partition

LVM magic value at 467234/43/13

HFS magic value at 503128/11/27
part_size 1187152130
     Mac HFS               1030406522 2217558651 1187152130
     HFS blocksize=16777216, 607 GB / 566 GiB
This partition ends after the disk limits. (start=1030406522, size=1187152130, end=2217558651, disk end=1953525168)

HFS magic value at 503128/11/29

LVM magic value at 507712/43/15

HFS magic value at 517703/27/20
part_size 5965314
     Mac HFS               1060256627 1066221940    5965314
     HFS blocksize=33554432, 3054 MB / 2912 MiB

HFS magic value at 517703/27/22
part_size 5965314
     Mac HFS               1054291317 1060256630    5965314
     HFS found using backup sector!, 3054 MB / 2912 MiB

LVM magic value at 517982/58/12

LVM magic value at 518746/47/3

LVM magic value at 518791/46/9

LVM magic value at 518810/40/28

LVM magic value at 519310/51/1

LVM magic value at 520277/51/6

LVM magic value at 520456/11/6

LVM magic value at 521516/55/18

LVM magic value at 524451/50/9

LVM magic value at 524579/31/29

LVM magic value at 525018/33/23

LVM magic value at 527966/11/9

LVM magic value at 528344/12/8

LVM magic value at 528922/17/31

LVM magic value at 539503/51/20

LVM magic value at 540294/41/2

LVM magic value at 541772/23/14

LVM magic value at 541780/33/15

LVM magic value at 542071/37/15

LVM magic value at 542078/56/28

LVM magic value at 543402/13/3

LVM magic value at 544327/54/8

LVM magic value at 545313/56/17

LVM magic value at 546568/18/17

LVM magic value at 548317/4/31
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size           1433600000
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                    32768 1433632767 1433600000 [970EVO_WIN]
     NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size           1433600000
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data               1433632767 2867232766 1433600000
     NTFS, blocksize=4096, 734 GB / 683 GiB
This partition ends after the disk limits. (start=1433632767, size=1433600000, end=2867232766, disk end=1953525168)

     Linux filesys. data   1433632768 1433636863       4096
     LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 2260 GB / 2105 GiB)
The following partitions can't be recovered:
     Mac HFS                543212146 2456339059 1913126914
     HFS blocksize=67108864, 979 GB / 912 GiB
     Mac HFS                893160340 4415481854 3522321515 [/‚ ]
     HFS blocksize=33554432, 1803 GB / 1679 GiB
     Mac HFS               1030406522 2217558651 1187152130
     HFS blocksize=16777216, 607 GB / 566 GiB
     MS Data               1433632767 2867232766 1433600000
     NTFS, blocksize=4096, 734 GB / 683 GiB

Results
     MS Data                    32768 1433632767 1433600000 [970EVO_WIN]
     NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
     Mac HFS                133241388  499751469  366510082
     HFS found using backup sector!, 187 GB / 174 GiB
     Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
     Mac HFS                195372016  416768565  221396550
     HFS blocksize=67108864, 113 GB / 105 GiB
     Mac HFS                269449908  651259914  381810007
     HFS found using backup sector!, 195 GB / 182 GiB
     Mac HFS                391522833 1482471956 1090949124 [Hšˆˆh!q„a$¢@
',Ž]
     HFS blocksize=16777216, 558 GB / 520 GiB
     Mac HFS                438849952  440166984    1317033
     HFS found using backup sector!, 674 MB / 643 MiB
     Mac HFS                440166981  441484013    1317033
     HFS blocksize=16384, 674 MB / 643 MiB
     Mac HFS                499751466  866261547  366510082
     HFS blocksize=16777216, 187 GB / 174 GiB
     Mac HFS                575480490  713433771  137953282
     HFS found using backup sector!, 70 GB / 65 GiB
     Mac HFS                651259911 1033069917  381810007
     HFS blocksize=4194304, 195 GB / 182 GiB
     Mac HFS                713433768  851387049  137953282
     HFS blocksize=16777216, 70 GB / 65 GiB
     Mac HFS               1054291317 1060256630    5965314
     HFS found using backup sector!, 3054 MB / 2912 MiB
     Mac HFS               1060256627 1066221940    5965314
     HFS blocksize=33554432, 3054 MB / 2912 MiB
     Linux filesys. data   1433632768 1433636863       4096
     LUKS 1 (Data size unknown), 2097 KB / 2048 KiB

Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1433600000 linear /dev/nvme1n1 32768" | dmsetup create test0
echo "0 366510082 linear /dev/nvme1n1 133241388" | dmsetup create test1
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test2
echo "0 221396550 linear /dev/nvme1n1 195372016" | dmsetup create test3
echo "0 381810007 linear /dev/nvme1n1 269449908" | dmsetup create test4
echo "0 1090949124 linear /dev/nvme1n1 391522833" | dmsetup create test5
echo "0 1317033 linear /dev/nvme1n1 438849952" | dmsetup create test6
echo "0 1317033 linear /dev/nvme1n1 440166981" | dmsetup create test7
echo "0 366510082 linear /dev/nvme1n1 499751466" | dmsetup create test8
echo "0 137953282 linear /dev/nvme1n1 575480490" | dmsetup create test9
echo "0 381810007 linear /dev/nvme1n1 651259911" | dmsetup create test10
echo "0 137953282 linear /dev/nvme1n1 713433768" | dmsetup create test11
echo "0 5965314 linear /dev/nvme1n1 1054291317" | dmsetup create test12
echo "0 5965314 linear /dev/nvme1n1 1060256627" | dmsetup create test13
echo "0 4096 linear /dev/nvme1n1 1433632768" | dmsetup create test14

interface_write()
 
No partition found or selected for recovery
simulate write!
Partition table type (auto): EFI GPT
Disk /dev/nvme1n1 - 1000 GB / 931 GiB
Partition table type: EFI GPT

Analyse Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
 1 P EFI System                  2048    1050623    1048576
 2 P Linux filesys. data      1050624   42993663   41943040
 3 P Linux filesys. data     42993664 1953523711 1910530048

search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32

HFS magic value at 95232/20/3
part_size 1401571398
     Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

Results
   P Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test0

interface_write()
 1 P Mac HFS                195035778 1596607175 1401571398
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P HFS                    195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

interface_write()
 1 P MS Data                195035778 1596607175 1401571398

search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32

HFS magic value at 95232/20/3
part_size 1401571398
     Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

HFS magic value at 95232/20/5

HFS magic value at 95396/31/17
part_size 221396550
     Mac HFS                195372016  416768565  221396550
     HFS blocksize=67108864, 113 GB / 105 GiB

HFS magic value at 95396/31/19

LVM magic value at 104822/25/31

LVM magic value at 110961/35/2
check_FAT: Bad number of sectors per cluster

LVM magic value at 124527/24/2

LVM magic value at 126876/43/19

LVM magic value at 135492/49/29

HFS magic value at 191173/16/18
part_size 1090949124
     Mac HFS                391522833 1482471956 1090949124 [Hšˆˆh!q„a$¢@
',Ž]
     HFS blocksize=16777216, 558 GB / 520 GiB

HFS magic value at 191173/16/20

LVM magic value at 202766/23/27

HFS magic value at 214925/18/6
part_size 1317033
     Mac HFS                440166981  441484013    1317033
     HFS blocksize=16384, 674 MB / 643 MiB

HFS magic value at 214925/18/8
part_size 1317033
     Mac HFS                438849952  440166984    1317033
     HFS found using backup sector!, 674 MB / 643 MiB

LVM magic value at 225723/27/11

block_group_nr 27743

recover_EXT2: part_offset problem

block_group_nr 27743

recover_EXT2: part_offset problem

block_group_nr 27743

recover_EXT2: part_offset problem

block_group_nr 27743

recover_EXT2: part_offset problem
check_FAT: Bad number of sectors per cluster

LVM magic value at 233552/22/6

HFS magic value at 244019/17/11
part_size 366510082
     Mac HFS                499751466  866261547  366510082
     HFS blocksize=16777216, 187 GB / 174 GiB

HFS magic value at 244019/17/13
part_size 366510082
     Mac HFS                133241388  499751469  366510082
     HFS found using backup sector!, 187 GB / 174 GiB

HFS magic value at 265240/19/19
part_size 1913126914
     Mac HFS                543212146 2456339059 1913126914
     HFS blocksize=67108864, 979 GB / 912 GiB
This partition ends after the disk limits. (start=543212146, size=1913126914, end=2456339059, disk end=1953525168)

HFS magic value at 265240/19/21

HFS magic value at 317998/0/8
part_size 381810007
     Mac HFS                651259911 1033069917  381810007
     HFS blocksize=4194304, 195 GB / 182 GiB

HFS magic value at 317998/0/10
part_size 381810007
     Mac HFS                269449908  651259914  381810007
     HFS found using backup sector!, 195 GB / 182 GiB

HFS magic value at 348356/21/9
part_size 137953282
     Mac HFS                713433768  851387049  137953282
     HFS blocksize=16777216, 70 GB / 65 GiB

HFS magic value at 348356/21/11
part_size 137953282
     Mac HFS                575480490  713433771  137953282
     HFS found using backup sector!, 70 GB / 65 GiB

LVM magic value at 410177/38/6

LVM magic value at 413001/20/17

LVM magic value at 424204/35/1

HFS magic value at 436113/28/21
part_size 3522321515
     Mac HFS                893160340 4415481854 3522321515 [/‚ ]
     HFS blocksize=33554432, 1803 GB / 1679 GiB
This partition ends after the disk limits. (start=893160340, size=3522321515, end=4415481854, disk end=1953525168)

HFS magic value at 436113/28/23
check_FAT: Bad jump in FAT partition

LVM magic value at 467234/43/13

HFS magic value at 503128/11/27
part_size 1187152130
     Mac HFS               1030406522 2217558651 1187152130
     HFS blocksize=16777216, 607 GB / 566 GiB
This partition ends after the disk limits. (start=1030406522, size=1187152130, end=2217558651, disk end=1953525168)

HFS magic value at 503128/11/29

LVM magic value at 507712/43/15

HFS magic value at 517703/27/20
part_size 5965314
     Mac HFS               1060256627 1066221940    5965314
     HFS blocksize=33554432, 3054 MB / 2912 MiB

HFS magic value at 517703/27/22
part_size 5965314
     Mac HFS               1054291317 1060256630    5965314
     HFS found using backup sector!, 3054 MB / 2912 MiB

LVM magic value at 517982/58/12

LVM magic value at 518746/47/3

LVM magic value at 518791/46/9

LVM magic value at 518810/40/28

LVM magic value at 519310/51/1

LVM magic value at 520277/51/6

LVM magic value at 520456/11/6

LVM magic value at 521516/55/18

LVM magic value at 524451/50/9

LVM magic value at 524579/31/29

LVM magic value at 525018/33/23

LVM magic value at 527966/11/9

LVM magic value at 528344/12/8

LVM magic value at 528922/17/31

LVM magic value at 539503/51/20

LVM magic value at 540294/41/2

LVM magic value at 541772/23/14

LVM magic value at 541780/33/15

LVM magic value at 542071/37/15

LVM magic value at 542078/56/28

LVM magic value at 543402/13/3

LVM magic value at 544327/54/8

LVM magic value at 545313/56/17

LVM magic value at 546568/18/17

LVM magic value at 548317/4/31
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size           1433600000
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                    32768 1433632767 1433600000 [970EVO_WIN]
     NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size           1433600000
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data               1433632767 2867232766 1433600000
     NTFS, blocksize=4096, 734 GB / 683 GiB
This partition ends after the disk limits. (start=1433632767, size=1433600000, end=2867232766, disk end=1953525168)

     Linux filesys. data   1433632768 1433636863       4096
     LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 2260 GB / 2105 GiB)
The following partitions can't be recovered:
     Mac HFS                543212146 2456339059 1913126914
     HFS blocksize=67108864, 979 GB / 912 GiB
     Mac HFS                893160340 4415481854 3522321515 [/‚ ]
     HFS blocksize=33554432, 1803 GB / 1679 GiB
     Mac HFS               1030406522 2217558651 1187152130
     HFS blocksize=16777216, 607 GB / 566 GiB
     MS Data               1433632767 2867232766 1433600000
     NTFS, blocksize=4096, 734 GB / 683 GiB
     
     Results
     MS Data                    32768 1433632767 1433600000 [970EVO_WIN]
     NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
     Mac HFS                133241388  499751469  366510082
     HFS found using backup sector!, 187 GB / 174 GiB
     Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
     Mac HFS                195372016  416768565  221396550
     HFS blocksize=67108864, 113 GB / 105 GiB
     Mac HFS                269449908  651259914  381810007
     HFS found using backup sector!, 195 GB / 182 GiB
     Mac HFS                391522833 1482471956 1090949124 [Hšˆˆh!q„a$¢@
',Ž]
     HFS blocksize=16777216, 558 GB / 520 GiB
     Mac HFS                438849952  440166984    1317033
     HFS found using backup sector!, 674 MB / 643 MiB
     Mac HFS                440166981  441484013    1317033
     HFS blocksize=16384, 674 MB / 643 MiB
     Mac HFS                499751466  866261547  366510082
     HFS blocksize=16777216, 187 GB / 174 GiB
     Mac HFS                575480490  713433771  137953282
     HFS found using backup sector!, 70 GB / 65 GiB
     Mac HFS                651259911 1033069917  381810007
     HFS blocksize=4194304, 195 GB / 182 GiB
     Mac HFS                713433768  851387049  137953282
     HFS blocksize=16777216, 70 GB / 65 GiB
     Mac HFS               1054291317 1060256630    5965314
     HFS found using backup sector!, 3054 MB / 2912 MiB
     Mac HFS               1060256627 1066221940    5965314
     HFS blocksize=33554432, 3054 MB / 2912 MiB
     Linux filesys. data   1433632768 1433636863       4096
     LUKS 1 (Data size unknown), 2097 KB / 2048 KiB

Re: Will writing my MSDATA trash my LVM2 (LUKS) data on the same drive?

Posted: 31 Aug 2023, 11:04
by PartitionTrajic
The file was too big so I had to continue here. I also deleted listings of all my windows files, which I think are not interesting.

Code: Select all




Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1433600000 linear /dev/nvme1n1 32768" | dmsetup create test0
echo "0 366510082 linear /dev/nvme1n1 133241388" | dmsetup create test1
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test2
echo "0 221396550 linear /dev/nvme1n1 195372016" | dmsetup create test3
echo "0 381810007 linear /dev/nvme1n1 269449908" | dmsetup create test4
echo "0 1090949124 linear /dev/nvme1n1 391522833" | dmsetup create test5
echo "0 1317033 linear /dev/nvme1n1 438849952" | dmsetup create test6
echo "0 1317033 linear /dev/nvme1n1 440166981" | dmsetup create test7
echo "0 366510082 linear /dev/nvme1n1 499751466" | dmsetup create test8
echo "0 137953282 linear /dev/nvme1n1 575480490" | dmsetup create test9
echo "0 381810007 linear /dev/nvme1n1 651259911" | dmsetup create test10
echo "0 137953282 linear /dev/nvme1n1 713433768" | dmsetup create test11
echo "0 5965314 linear /dev/nvme1n1 1054291317" | dmsetup create test12
echo "0 5965314 linear /dev/nvme1n1 1060256627" | dmsetup create test13
echo "0 4096 linear /dev/nvme1n1 1433632768" | dmsetup create test14

interface_write()
 
No partition found or selected for recovery
simulate write!
Partition table type (auto): EFI GPT
Disk /dev/nvme1n1 - 1000 GB / 931 GiB
Partition table type: EFI GPT

Analyse Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
 1 P EFI System                  2048    1050623    1048576
 2 P Linux filesys. data      1050624   42993663   41943040
 3 P Linux filesys. data     42993664 1953523711 1910530048

search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32

HFS magic value at 95232/20/3
part_size 1401571398
     Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

Results
   P Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test0
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
gpt_change_part_type
Change partition type:
   P MBR                    195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P FAT32                  195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB


dir_partition inode=0
   P MBR                    195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
FAT: Can't list files, bad sector size.
Directory /
gpt_change_part_type
Change partition type:
   P EFI System             195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P FAT32                  195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB


dir_partition inode=0
   P EFI System             195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
FAT: Can't list files, bad sector size.
Directory /
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P NTFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P HPFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Support for this filesystem hasn't been implemented.
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P HFS                    195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Support for this filesystem hasn't been implemented.
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P ext4                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P HPUX Data              195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P NTFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P HPUX Data              195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.

   P HPUX Data              195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P HFS                    195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Support for this filesystem hasn't been implemented.

interface_write()
 1 P MS Data                195035778 1596607175 1401571398
simulate write!

Analyse Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
 1 P EFI System                  2048    1050623    1048576
 2 P Linux filesys. data      1050624   42993663   41943040
 3 P Linux filesys. data     42993664 1953523711 1910530048

search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32

HFS magic value at 95232/20/3
part_size 1401571398
     Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

Results
   P Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test0
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
gpt_change_part_type
Change partition type:
   P EFI System             195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P FAT32                  195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB


dir_partition inode=0
   P EFI System             195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
FAT: Can't list files, bad sector size.
Directory /
gpt_change_part_type
Change partition type:
   P MBR                    195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P NTFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P MBR                    195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P HPFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Support for this filesystem hasn't been implemented.
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P exFAT                  195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Not an exFAT boot sector.

   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P NTFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P HFS+                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Support for this filesystem hasn't been implemented.
gpt_change_part_type
Change partition type:
   P EFI System             195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P FAT32                  195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB


dir_partition inode=0
   P EFI System             195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
FAT: Can't list files, bad sector size.
Directory /
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P FAT32                  195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB


dir_partition inode=0
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
FAT: Can't list files, bad sector size.
Directory /
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P exFAT                  195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Not an exFAT boot sector.

   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:NTFS signature is missing.
NTFS signature is missing.

   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P NTFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
 1 P MS Data                195035778 1596607175 1401571398

search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32

HFS magic value at 95232/20/3
part_size 1401571398
     Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

HFS magic value at 95232/20/5

HFS magic value at 95396/31/17
part_size 221396550
     Mac HFS                195372016  416768565  221396550
     HFS blocksize=67108864, 113 GB / 105 GiB

HFS magic value at 95396/31/19

LVM magic value at 104822/25/31

LVM magic value at 110961/35/2
check_FAT: Bad number of sectors per cluster

LVM magic value at 124527/24/2

LVM magic value at 126876/43/19

LVM magic value at 135492/49/29

HFS magic value at 191173/16/18
part_size 1090949124
     Mac HFS                391522833 1482471956 1090949124 [Hšˆˆh!q„a$¢@
',Ž]
     HFS blocksize=16777216, 558 GB / 520 GiB

HFS magic value at 191173/16/20

LVM magic value at 202766/23/27

HFS magic value at 214925/18/6
part_size 1317033
     Mac HFS                440166981  441484013    1317033
     HFS blocksize=16384, 674 MB / 643 MiB

HFS magic value at 214925/18/8
part_size 1317033
     Mac HFS                438849952  440166984    1317033
     HFS found using backup sector!, 674 MB / 643 MiB

LVM magic value at 225723/27/11

block_group_nr 27743

recover_EXT2: part_offset problem

block_group_nr 27743

recover_EXT2: part_offset problem

block_group_nr 27743

recover_EXT2: part_offset problem

block_group_nr 27743

recover_EXT2: part_offset problem
check_FAT: Bad number of sectors per cluster

LVM magic value at 233552/22/6

HFS magic value at 244019/17/11
part_size 366510082
     Mac HFS                499751466  866261547  366510082
     HFS blocksize=16777216, 187 GB / 174 GiB

HFS magic value at 244019/17/13
part_size 366510082
     Mac HFS                133241388  499751469  366510082
     HFS found using backup sector!, 187 GB / 174 GiB

HFS magic value at 265240/19/19
part_size 1913126914
     Mac HFS                543212146 2456339059 1913126914
     HFS blocksize=67108864, 979 GB / 912 GiB
This partition ends after the disk limits. (start=543212146, size=1913126914, end=2456339059, disk end=1953525168)

HFS magic value at 265240/19/21

HFS magic value at 317998/0/8
part_size 381810007
     Mac HFS                651259911 1033069917  381810007
     HFS blocksize=4194304, 195 GB / 182 GiB

HFS magic value at 317998/0/10
part_size 381810007
     Mac HFS                269449908  651259914  381810007
     HFS found using backup sector!, 195 GB / 182 GiB

HFS magic value at 348356/21/9
part_size 137953282
     Mac HFS                713433768  851387049  137953282
     HFS blocksize=16777216, 70 GB / 65 GiB

HFS magic value at 348356/21/11
part_size 137953282
     Mac HFS                575480490  713433771  137953282
     HFS found using backup sector!, 70 GB / 65 GiB

LVM magic value at 410177/38/6

LVM magic value at 413001/20/17

LVM magic value at 424204/35/1

HFS magic value at 436113/28/21
part_size 3522321515
     Mac HFS                893160340 4415481854 3522321515 [/‚ ]
     HFS blocksize=33554432, 1803 GB / 1679 GiB
This partition ends after the disk limits. (start=893160340, size=3522321515, end=4415481854, disk end=1953525168)

HFS magic value at 436113/28/23
check_FAT: Bad jump in FAT partition

LVM magic value at 467234/43/13

HFS magic value at 503128/11/27
part_size 1187152130
     Mac HFS               1030406522 2217558651 1187152130
     HFS blocksize=16777216, 607 GB / 566 GiB
This partition ends after the disk limits. (start=1030406522, size=1187152130, end=2217558651, disk end=1953525168)

HFS magic value at 503128/11/29

LVM magic value at 507712/43/15

HFS magic value at 517703/27/20
part_size 5965314
     Mac HFS               1060256627 1066221940    5965314
     HFS blocksize=33554432, 3054 MB / 2912 MiB

HFS magic value at 517703/27/22
part_size 5965314
     Mac HFS               1054291317 1060256630    5965314
     HFS found using backup sector!, 3054 MB / 2912 MiB

LVM magic value at 517982/58/12

LVM magic value at 518746/47/3

LVM magic value at 518791/46/9

LVM magic value at 518810/40/28

LVM magic value at 519310/51/1

LVM magic value at 520277/51/6

LVM magic value at 520456/11/6

LVM magic value at 521516/55/18

LVM magic value at 524451/50/9

LVM magic value at 524579/31/29

LVM magic value at 525018/33/23

LVM magic value at 527966/11/9

LVM magic value at 528344/12/8

LVM magic value at 528922/17/31

LVM magic value at 539503/51/20

LVM magic value at 540294/41/2

LVM magic value at 541772/23/14

LVM magic value at 541780/33/15

LVM magic value at 542071/37/15

LVM magic value at 542078/56/28

LVM magic value at 543402/13/3

LVM magic value at 544327/54/8

LVM magic value at 545313/56/17

LVM magic value at 546568/18/17

LVM magic value at 548317/4/31
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size           1433600000
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                    32768 1433632767 1433600000 [970EVO_WIN]
     NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size           1433600000
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data               1433632767 2867232766 1433600000
     NTFS, blocksize=4096, 734 GB / 683 GiB
This partition ends after the disk limits. (start=1433632767, size=1433600000, end=2867232766, disk end=1953525168)

     Linux filesys. data   1433632768 1433636863       4096
     LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 2260 GB / 2105 GiB)
The following partitions can't be recovered:
     Mac HFS                543212146 2456339059 1913126914
     HFS blocksize=67108864, 979 GB / 912 GiB
     Mac HFS                893160340 4415481854 3522321515 [/‚ ]
     HFS blocksize=33554432, 1803 GB / 1679 GiB
     Mac HFS               1030406522 2217558651 1187152130
     HFS blocksize=16777216, 607 GB / 566 GiB
     MS Data               1433632767 2867232766 1433600000
     NTFS, blocksize=4096, 734 GB / 683 GiB

Results
     MS Data                    32768 1433632767 1433600000 [970EVO_WIN]
     NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
     Mac HFS                133241388  499751469  366510082
     HFS found using backup sector!, 187 GB / 174 GiB
     Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
     Mac HFS                195372016  416768565  221396550
     HFS blocksize=67108864, 113 GB / 105 GiB
     Mac HFS                269449908  651259914  381810007
     HFS found using backup sector!, 195 GB / 182 GiB
     Mac HFS                391522833 1482471956 1090949124 [Hšˆˆh!q„a$¢@
',Ž]
     HFS blocksize=16777216, 558 GB / 520 GiB
     Mac HFS                438849952  440166984    1317033
     HFS found using backup sector!, 674 MB / 643 MiB
     Mac HFS                440166981  441484013    1317033
     HFS blocksize=16384, 674 MB / 643 MiB
     Mac HFS                499751466  866261547  366510082
     HFS blocksize=16777216, 187 GB / 174 GiB
     Mac HFS                575480490  713433771  137953282
     HFS found using backup sector!, 70 GB / 65 GiB
     Mac HFS                651259911 1033069917  381810007
     HFS blocksize=4194304, 195 GB / 182 GiB
     Mac HFS                713433768  851387049  137953282
     HFS blocksize=16777216, 70 GB / 65 GiB
     Mac HFS               1054291317 1060256630    5965314
     HFS found using backup sector!, 3054 MB / 2912 MiB
     Mac HFS               1060256627 1066221940    5965314
     HFS blocksize=33554432, 3054 MB / 2912 MiB
     Linux filesys. data   1433632768 1433636863       4096
     LUKS 1 (Data size unknown), 2097 KB / 2048 KiB

Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1433600000 linear /dev/nvme1n1 32768" | dmsetup create test0
echo "0 366510082 linear /dev/nvme1n1 133241388" | dmsetup create test1
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test2
echo "0 221396550 linear /dev/nvme1n1 195372016" | dmsetup create test3
echo "0 381810007 linear /dev/nvme1n1 269449908" | dmsetup create test4
echo "0 1090949124 linear /dev/nvme1n1 391522833" | dmsetup create test5
echo "0 1317033 linear /dev/nvme1n1 438849952" | dmsetup create test6
echo "0 1317033 linear /dev/nvme1n1 440166981" | dmsetup create test7
echo "0 366510082 linear /dev/nvme1n1 499751466" | dmsetup create test8
echo "0 137953282 linear /dev/nvme1n1 575480490" | dmsetup create test9
echo "0 381810007 linear /dev/nvme1n1 651259911" | dmsetup create test10
echo "0 137953282 linear /dev/nvme1n1 713433768" | dmsetup create test11
echo "0 5965314 linear /dev/nvme1n1 1054291317" | dmsetup create test12
echo "0 5965314 linear /dev/nvme1n1 1060256627" | dmsetup create test13
echo "0 4096 linear /dev/nvme1n1 1433632768" | dmsetup create test14

interface_write()
 
No partition found or selected for recovery
simulate write!
Partition table type (auto): EFI GPT
Disk /dev/nvme1n1 - 1000 GB / 931 GiB
Partition table type: EFI GPT
Partition table type (auto): EFI GPT
Partition table type (auto): EFI GPT
Disk /dev/nvme1n1 - 1000 GB / 931 GiB
Partition table type: EFI GPT

Analyse Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
 1 P EFI System                  2048    1050623    1048576
 2 P Linux filesys. data      1050624   42993663   41943040
 3 P Linux filesys. data     42993664 1953523711 1910530048

search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32

HFS magic value at 95232/20/3
part_size 1401571398
     Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

Results
   P Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test0
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P NTFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P exFAT                  195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Not an exFAT boot sector.

   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P FAT32                  195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB


dir_partition inode=0
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
FAT: Can't list files, bad sector size.
Directory /
gpt_change_part_type
Change partition type:
   P MBR                    195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P FAT32                  195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB


dir_partition inode=0
   P MBR                    195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
FAT: Can't list files, bad sector size.
Directory /
gpt_change_part_type
Change partition type:
   P MS LDM MetaData        195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P NTFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P MS LDM MetaData        195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
 1 P MS LDM MetaData        195035778 1596607175 1401571398
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
gpt_change_part_type
Change partition type:
   P EFI System             195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P NTFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P EFI System             195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P EFI System             195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P FAT32                  195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB


dir_partition inode=0
   P EFI System             195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
FAT: Can't list files, bad sector size.
Directory /
gpt_change_part_type
Change partition type:
   P EFI System             195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P NTFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P EFI System             195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
 1 P EFI System             195035778 1596607175 1401571398
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.

   P EFI System             195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P Extended Boot          195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P NTFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P Extended Boot          195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P Extended Boot          195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P exFAT                  195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Not an exFAT boot sector.

   P Extended Boot          195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P Extended Boot          195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P NTFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P Extended Boot          195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P MBR                    195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P NTFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P MBR                    195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P Linux LVM              195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P NTFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P Linux LVM              195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P Linux filesys. data    195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P NTFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P Linux filesys. data    195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P Linux LVM2             195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Support for this filesystem hasn't been implemented.
gpt_change_part_type
Change partition type:
   P Extended Boot          195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P HFS+                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P Extended Boot          195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Support for this filesystem hasn't been implemented.
gpt_change_part_type
Change partition type:
   P EFI System             195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P exFAT                  195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Not an exFAT boot sector.

   P EFI System             195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filNTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
esystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P MS Reserved            195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P exFAT                  195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Not an exFAT boot sector.

   P MS Reserved            195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P exFAT                  195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Not an exFAT boot sector.

   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P NTFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P MS LDM Data            195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P NTFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P MS LDM Data            195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
   P MS LDM Data            195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P GFS2                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P MS LDM Data            195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Support for this filesystem hasn't been implemented.
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P NTFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
 1 P MS Data                195035778 1596607175 1401571398

search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32

HFS magic value at 95232/20/3
part_size 1401571398
     Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

HFS magic value at 95232/20/5

HFS magic value at 95396/31/17
part_size 221396550
     Mac HFS                195372016  416768565  221396550
     HFS blocksize=67108864, 113 GB / 105 GiB

HFS magic value at 95396/31/19

LVM magic value at 104822/25/31

LVM magic value at 110961/35/2
check_FAT: Bad number of sectors per cluster

LVM magic value at 124527/24/2

LVM magic value at 126876/43/19

LVM magic value at 135492/49/29

HFS magic value at 191173/16/18
part_size 1090949124
     Mac HFS                391522833 1482471956 1090949124 [Hšˆˆh!q„a$¢@
',Ž]
     HFS blocksize=16777216, 558 GB / 520 GiB

HFS magic value at 191173/16/20

LVM magic value at 202766/23/27

HFS magic value at 214925/18/6
part_size 1317033
     Mac HFS                440166981  441484013    1317033
     HFS blocksize=16384, 674 MB / 643 MiB

HFS magic value at 214925/18/8
part_size 1317033
     Mac HFS                438849952  440166984    1317033
     HFS found using backup sector!, 674 MB / 643 MiB

LVM magic value at 225723/27/11

block_group_nr 27743

recover_EXT2: part_offset problem

block_group_nr 27743

recover_EXT2: part_offset problem

block_group_nr 27743

recover_EXT2: part_offset problem

block_group_nr 27743

recover_EXT2: part_offset problem
check_FAT: Bad number of sectors per cluster

LVM magic value at 233552/22/6

HFS magic value at 244019/17/11
part_size 366510082
     Mac HFS                499751466  866261547  366510082
     HFS blocksize=16777216, 187 GB / 174 GiB

HFS magic value at 244019/17/13
part_size 366510082
     Mac HFS                133241388  499751469  366510082
     HFS found using backup sector!, 187 GB / 174 GiB

HFS magic value at 265240/19/19
part_size 1913126914
     Mac HFS                543212146 2456339059 1913126914
     HFS blocksize=67108864, 979 GB / 912 GiB
This partition ends after the disk limits. (start=543212146, size=1913126914, end=2456339059, disk end=1953525168)

HFS magic value at 265240/19/21

HFS magic value at 317998/0/8
part_size 381810007
     Mac HFS                651259911 1033069917  381810007
     HFS blocksize=4194304, 195 GB / 182 GiB

HFS magic value at 317998/0/10
part_size 381810007
     Mac HFS                269449908  651259914  381810007
     HFS found using backup sector!, 195 GB / 182 GiB

HFS magic value at 348356/21/9
part_size 137953282
     Mac HFS                713433768  851387049  137953282
     HFS blocksize=16777216, 70 GB / 65 GiB

HFS magic value at 348356/21/11
part_size 137953282
     Mac HFS                575480490  713433771  137953282
     HFS found using backup sector!, 70 GB / 65 GiB

LVM magic value at 410177/38/6

LVM magic value at 413001/20/17

LVM magic value at 424204/35/1

HFS magic value at 436113/28/21
part_size 3522321515
     Mac HFS                893160340 4415481854 3522321515 [/‚ ]
     HFS blocksize=33554432, 1803 GB / 1679 GiB
This partition ends after the disk limits. (start=893160340, size=3522321515, end=4415481854, disk end=1953525168)

HFS magic value at 436113/28/23
check_FAT: Bad jump in FAT partition

LVM magic value at 467234/43/13

HFS magic value at 503128/11/27
part_size 1187152130
     Mac HFS               1030406522 2217558651 1187152130
     HFS blocksize=16777216, 607 GB / 566 GiB
This partition ends after the disk limits. (start=1030406522, size=1187152130, end=2217558651, disk end=1953525168)

HFS magic value at 503128/11/29

LVM magic value at 507712/43/15

HFS magic value at 517703/27/20
part_size 5965314
     Mac HFS               1060256627 1066221940    5965314
     HFS blocksize=33554432, 3054 MB / 2912 MiB

HFS magic value at 517703/27/22
part_size 5965314
     Mac HFS               1054291317 1060256630    5965314
     HFS found using backup sector!, 3054 MB / 2912 MiB

LVM magic value at 517982/58/12

LVM magic value at 518746/47/3

LVM magic value at 518791/46/9

LVM magic value at 518810/40/28

LVM magic value at 519310/51/1

LVM magic value at 520277/51/6

LVM magic value at 520456/11/6

LVM magic value at 521516/55/18

LVM magic value at 524451/50/9

LVM magic value at 524579/31/29

LVM magic value at 525018/33/23

LVM magic value at 527966/11/9

LVM magic value at 528344/12/8

LVM magic value at 528922/17/31

LVM magic value at 539503/51/20

LVM magic value at 540294/41/2

LVM magic value at 541772/23/14

LVM magic value at 541780/33/15

LVM magic value at 542071/37/15

LVM magic value at 542078/56/28

LVM magic value at 543402/13/3

LVM magic value at 544327/54/8

LVM magic value at 545313/56/17

LVM magic value at 546568/18/17

LVM magic value at 548317/4/31
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size           1433600000
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                    32768 1433632767 1433600000 [970EVO_WIN]
     NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size           1433600000
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data               1433632767 2867232766 1433600000
     NTFS, blocksize=4096, 734 GB / 683 GiB
This partition ends after the disk limits. (start=1433632767, size=1433600000, end=2867232766, disk end=1953525168)

     Linux filesys. data   1433632768 1433636863       4096
     LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 2260 GB / 2105 GiB)
The following partitions can't be recovered:
     Mac HFS                543212146 2456339059 1913126914
     HFS blocksize=67108864, 979 GB / 912 GiB
     Mac HFS                893160340 4415481854 3522321515 [/‚ ]
     HFS blocksize=33554432, 1803 GB / 1679 GiB
     Mac HFS               1030406522 2217558651 1187152130
     HFS blocksize=16777216, 607 GB / 566 GiB
     MS Data               1433632767 2867232766 1433600000
     NTFS, blocksize=4096, 734 GB / 683 GiB

Results
     MS Data                    32768 1433632767 1433600000 [970EVO_WIN]
     NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
     Mac HFS                133241388  499751469  366510082
     HFS found using backup sector!, 187 GB / 174 GiB
     Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
     Mac HFS                195372016  416768565  221396550
     HFS blocksize=67108864, 113 GB / 105 GiB
     Mac HFS                269449908  651259914  381810007
     HFS found using backup sector!, 195 GB / 182 GiB
     Mac HFS                391522833 1482471956 1090949124 [Hšˆˆh!q„a$¢@
',Ž]
     HFS blocksize=16777216, 558 GB / 520 GiB
     Mac HFS                438849952  440166984    1317033
     HFS found using backup sector!, 674 MB / 643 MiB
     Mac HFS                440166981  441484013    1317033
     HFS blocksize=16384, 674 MB / 643 MiB
     Mac HFS                499751466  866261547  366510082
     HFS blocksize=16777216, 187 GB / 174 GiB
     Mac HFS                575480490  713433771  137953282
     HFS found using backup sector!, 70 GB / 65 GiB
     Mac HFS                651259911 1033069917  381810007
     HFS blocksize=4194304, 195 GB / 182 GiB
     Mac HFS                713433768  851387049  137953282
     HFS blocksize=16777216, 70 GB / 65 GiB
     Mac HFS               1054291317 1060256630    5965314
     HFS found using backup sector!, 3054 MB / 2912 MiB
     Mac HFS               1060256627 1066221940    5965314
     HFS blocksize=33554432, 3054 MB / 2912 MiB
     Linux filesys. data   1433632768 1433636863       4096
     LUKS 1 (Data size unknown), 2097 KB / 2048 KiB

Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1433600000 linear /dev/nvme1n1 32768" | dmsetup create test0
echo "0 366510082 linear /dev/nvme1n1 133241388" | dmsetup create test1
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test2
echo "0 221396550 linear /dev/nvme1n1 195372016" | dmsetup create test3
echo "0 381810007 linear /dev/nvme1n1 269449908" | dmsetup create test4
echo "0 1090949124 linear /dev/nvme1n1 391522833" | dmsetup create test5
echo "0 1317033 linear /dev/nvme1n1 438849952" | dmsetup create test6
echo "0 1317033 linear /dev/nvme1n1 440166981" | dmsetup create test7
echo "0 366510082 linear /dev/nvme1n1 499751466" | dmsetup create test8
echo "0 137953282 linear /dev/nvme1n1 575480490" | dmsetup create test9
echo "0 381810007 linear /dev/nvme1n1 651259911" | dmsetup create test10
echo "0 137953282 linear /dev/nvme1n1 713433768" | dmsetup create test11
echo "0 5965314 linear /dev/nvme1n1 1054291317" | dmsetup create test12
echo "0 5965314 linear /dev/nvme1n1 1060256627" | dmsetup create test13
echo "0 4096 linear /dev/nvme1n1 1433632768" | dmsetup create test14

interface_write()
 
No partition found or selected for recovery
simulate write!

Analyse Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
 1 P EFI System                  2048    1050623    1048576
 2 P Linux filesys. data      1050624   42993663   41943040
 3 P Linux filesys. data     42993664 1953523711 1910530048

search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32

HFS magic value at 95232/20/3
part_size 1401571398
     Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

Results
   P Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test0

interface_write()
 1 P Mac HFS                195035778 1596607175 1401571398

interface_write()
 1 P Mac HFS                195035778 1596607175 1401571398
NTFS signature is missing.
NTFS signature is missing.
gpt_change_part_type
Change partition type:
   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
   P NTFS                   195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

   P MS Data                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
 1 P MS Data                195035778 1596607175 1401571398

search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32

HFS magic value at 95232/20/3
part_size 1401571398
     Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB

HFS magic value at 95232/20/5

HFS magic value at 95396/31/17
part_size 221396550
     Mac HFS                195372016  416768565  221396550
     HFS blocksize=67108864, 113 GB / 105 GiB

HFS magic value at 95396/31/19

LVM magic value at 104822/25/31

LVM magic value at 110961/35/2
check_FAT: Bad number of sectors per cluster

LVM magic value at 124527/24/2

LVM magic value at 126876/43/19

LVM magic value at 135492/49/29

HFS magic value at 191173/16/18
part_size 1090949124
     Mac HFS                391522833 1482471956 1090949124 [Hšˆˆh!q„a$¢@
',Ž]
     HFS blocksize=16777216, 558 GB / 520 GiB

HFS magic value at 191173/16/20

LVM magic value at 202766/23/27

HFS magic value at 214925/18/6
part_size 1317033
     Mac HFS                440166981  441484013    1317033
     HFS blocksize=16384, 674 MB / 643 MiB

HFS magic value at 214925/18/8
part_size 1317033
     Mac HFS                438849952  440166984    1317033
     HFS found using backup sector!, 674 MB / 643 MiB

LVM magic value at 225723/27/11

block_group_nr 27743

recover_EXT2: part_offset problem

block_group_nr 27743

recover_EXT2: part_offset problem

block_group_nr 27743

recover_EXT2: part_offset problem

block_group_nr 27743

recover_EXT2: part_offset problem
check_FAT: Bad number of sectors per cluster

LVM magic value at 233552/22/6

HFS magic value at 244019/17/11
part_size 366510082
     Mac HFS                499751466  866261547  366510082
     HFS blocksize=16777216, 187 GB / 174 GiB

HFS magic value at 244019/17/13
part_size 366510082
     Mac HFS                133241388  499751469  366510082
     HFS found using backup sector!, 187 GB / 174 GiB

HFS magic value at 265240/19/19
part_size 1913126914
     Mac HFS                543212146 2456339059 1913126914
     HFS blocksize=67108864, 979 GB / 912 GiB
This partition ends after the disk limits. (start=543212146, size=1913126914, end=2456339059, disk end=1953525168)

HFS magic value at 265240/19/21

HFS magic value at 317998/0/8
part_size 381810007
     Mac HFS                651259911 1033069917  381810007
     HFS blocksize=4194304, 195 GB / 182 GiB

HFS magic value at 317998/0/10
part_size 381810007
     Mac HFS                269449908  651259914  381810007
     HFS found using backup sector!, 195 GB / 182 GiB

HFS magic value at 348356/21/9
part_size 137953282
     Mac HFS                713433768  851387049  137953282
     HFS blocksize=16777216, 70 GB / 65 GiB

HFS magic value at 348356/21/11
part_size 137953282
     Mac HFS                575480490  713433771  137953282
     HFS found using backup sector!, 70 GB / 65 GiB

LVM magic value at 410177/38/6

LVM magic value at 413001/20/17

LVM magic value at 424204/35/1

HFS magic value at 436113/28/21
part_size 3522321515
     Mac HFS                893160340 4415481854 3522321515 [/‚ ]
     HFS blocksize=33554432, 1803 GB / 1679 GiB
This partition ends after the disk limits. (start=893160340, size=3522321515, end=4415481854, disk end=1953525168)

HFS magic value at 436113/28/23
check_FAT: Bad jump in FAT partition

LVM magic value at 467234/43/13

HFS magic value at 503128/11/27
part_size 1187152130
     Mac HFS               1030406522 2217558651 1187152130
     HFS blocksize=16777216, 607 GB / 566 GiB
This partition ends after the disk limits. (start=1030406522, size=1187152130, end=2217558651, disk end=1953525168)

HFS magic value at 503128/11/29

LVM magic value at 507712/43/15

HFS magic value at 517703/27/20
part_size 5965314
     Mac HFS               1060256627 1066221940    5965314
     HFS blocksize=33554432, 3054 MB / 2912 MiB

HFS magic value at 517703/27/22
part_size 5965314
     Mac HFS               1054291317 1060256630    5965314
     HFS found using backup sector!, 3054 MB / 2912 MiB

LVM magic value at 517982/58/12

LVM magic value at 518746/47/3

LVM magic value at 518791/46/9

LVM magic value at 518810/40/28

LVM magic value at 519310/51/1

LVM magic value at 520277/51/6

LVM magic value at 520456/11/6

LVM magic value at 521516/55/18

LVM magic value at 524451/50/9

LVM magic value at 524579/31/29

LVM magic value at 525018/33/23

LVM magic value at 527966/11/9

LVM magic value at 528344/12/8

LVM magic value at 528922/17/31

LVM magic value at 539503/51/20

LVM magic value at 540294/41/2

LVM magic value at 541772/23/14

LVM magic value at 541780/33/15

LVM magic value at 542071/37/15

LVM magic value at 542078/56/28

LVM magic value at 543402/13/3

LVM magic value at 544327/54/8

LVM magic value at 545313/56/17

LVM magic value at 546568/18/17

LVM magic value at 548317/4/31
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size           1433600000
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                    32768 1433632767 1433600000 [970EVO_WIN]
     NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size           1433600000
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data               1433632767 2867232766 1433600000
     NTFS, blocksize=4096, 734 GB / 683 GiB
This partition ends after the disk limits. (start=1433632767, size=1433600000, end=2867232766, disk end=1953525168)

     Linux filesys. data   1433632768 1433636863       4096
     LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 2260 GB / 2105 GiB)
The following partitions can't be recovered:
     Mac HFS                543212146 2456339059 1913126914
     HFS blocksize=67108864, 979 GB / 912 GiB
     Mac HFS                893160340 4415481854 3522321515 [/‚ ]
     HFS blocksize=33554432, 1803 GB / 1679 GiB
     Mac HFS               1030406522 2217558651 1187152130
     HFS blocksize=16777216, 607 GB / 566 GiB
     MS Data               1433632767 2867232766 1433600000
     NTFS, blocksize=4096, 734 GB / 683 GiB

Results
     MS Data                    32768 1433632767 1433600000 [970EVO_WIN]
     NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
     Mac HFS                133241388  499751469  366510082
     HFS found using backup sector!, 187 GB / 174 GiB
     Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
     Mac HFS                195372016  416768565  221396550
     HFS blocksize=67108864, 113 GB / 105 GiB
     Mac HFS                269449908  651259914  381810007
     HFS found using backup sector!, 195 GB / 182 GiB
     Mac HFS                391522833 1482471956 1090949124 [Hšˆˆh!q„a$¢@
',Ž]
     HFS blocksize=16777216, 558 GB / 520 GiB
     Mac HFS                438849952  440166984    1317033
     HFS found using backup sector!, 674 MB / 643 MiB
     Mac HFS                440166981  441484013    1317033
     HFS blocksize=16384, 674 MB / 643 MiB
     Mac HFS                499751466  866261547  366510082
     HFS blocksize=16777216, 187 GB / 174 GiB
     Mac HFS                575480490  713433771  137953282
     HFS found using backup sector!, 70 GB / 65 GiB
     Mac HFS                651259911 1033069917  381810007
     HFS blocksize=4194304, 195 GB / 182 GiB
     Mac HFS                713433768  851387049  137953282
     HFS blocksize=16777216, 70 GB / 65 GiB
     Mac HFS               1054291317 1060256630    5965314
     HFS found using backup sector!, 3054 MB / 2912 MiB
     Mac HFS               1060256627 1066221940    5965314
     HFS blocksize=33554432, 3054 MB / 2912 MiB
     Linux filesys. data   1433632768 1433636863       4096
     LUKS 1 (Data size unknown), 2097 KB / 2048 KiB

Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1433600000 linear /dev/nvme1n1 32768" | dmsetup create test0
echo "0 366510082 linear /dev/nvme1n1 133241388" | dmsetup create test1
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test2
echo "0 221396550 linear /dev/nvme1n1 195372016" | dmsetup create test3
echo "0 381810007 linear /dev/nvme1n1 269449908" | dmsetup create test4
echo "0 1090949124 linear /dev/nvme1n1 391522833" | dmsetup create test5
echo "0 1317033 linear /dev/nvme1n1 438849952" | dmsetup create test6
echo "0 1317033 linear /dev/nvme1n1 440166981" | dmsetup create test7
echo "0 366510082 linear /dev/nvme1n1 499751466" | dmsetup create test8
echo "0 137953282 linear /dev/nvme1n1 575480490" | dmsetup create test9
echo "0 381810007 linear /dev/nvme1n1 651259911" | dmsetup create test10
echo "0 137953282 linear /dev/nvme1n1 713433768" | dmsetup create test11
echo "0 5965314 linear /dev/nvme1n1 1054291317" | dmsetup create test12
echo "0 5965314 linear /dev/nvme1n1 1060256627" | dmsetup create test13
echo "0 4096 linear /dev/nvme1n1 1433632768" | dmsetup create test14

     Mac HFS               1060256627 1066221940    5965314
     HFS blocksize=33554432, 3054 MB / 2912 MiB
Support for this filesystem hasn't been implemented.

     Mac HFS               1054291317 1060256630    5965314
     HFS found using backup sector!, 3054 MB / 2912 MiB
Support for this filesystem hasn't been implemented.

     Mac HFS                713433768  851387049  137953282
     HFS blocksize=16777216, 70 GB / 65 GiB
Support for this filesystem hasn't been implemented.

     Mac HFS                651259911 1033069917  381810007
     HFS blocksize=4194304, 195 GB / 182 GiB
Support for this filesystem hasn't been implemented.

     Mac HFS                575480490  713433771  137953282
     HFS found using backup sector!, 70 GB / 65 GiB
Support for this filesystem hasn't been implemented.

     Mac HFS                499751466  866261547  366510082
     HFS blocksize=16777216, 187 GB / 174 GiB
Support for this filesystem hasn't been implemented.

     Mac HFS                440166981  441484013    1317033
     HFS blocksize=16384, 674 MB / 643 MiB
Support for this filesystem hasn't been implemented.

     Mac HFS                440166981  441484013    1317033
     HFS blocksize=16384, 674 MB / 643 MiB
Support for this filesystem hasn't been implemented.

     Mac HFS                438849952  440166984    1317033
     HFS found using backup sector!, 674 MB / 643 MiB
Support for this filesystem hasn't been implemented.

     Mac HFS                391522833 1482471956 1090949124 [Hšˆˆh!q„a$¢@
',Ž]
     HFS blocksize=16777216, 558 GB / 520 GiB
Support for this filesystem hasn't been implemented.

     Mac HFS                269449908  651259914  381810007
     HFS found using backup sector!, 195 GB / 182 GiB
Support for this filesystem hasn't been implemented.

     Mac HFS                195372016  416768565  221396550
     HFS blocksize=67108864, 113 GB / 105 GiB
Support for this filesystem hasn't been implemented.

     Mac HFS                195035778 1596607175 1401571398
     HFS blocksize=67108864, 717 GB / 668 GiB
Support for this filesystem hasn't been implemented.

     Mac HFS                133241388  499751469  366510082
     HFS found using backup sector!, 187 GB / 174 GiB
Support for this filesystem hasn't been implemented.
ntfs_device_testdisk_io_ioctl() unimplemented


dir_partition inode=5
     MS Data                    32768 1433632767 1433600000 [970EVO_WIN]
     NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
Directory /
       5 dr-xr-xr-x     0      0         0 12-Aug-2023 21:47 .
       5 dr-xr-xr-x     0      0         0 12-Aug-2023 21:47 ..
 
    1005 -r--r--r--     0      0 5100273664 12-Aug-2023 14:23 pagefile.sys

     Mac HFS                133241388  499751469  366510082
     HFS found using backup sector!, 187 GB / 174 GiB
Support for this filesystem hasn't been implemented.

     Linux filesys. data   1433632768 1433636863       4096
     LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
Support for this filesystem wasn't enabled during compilation.

interface_write()
 
No partition found or selected for recovery
simulate write!

TestDisk exited normally.

Re: Will writing my MSDATA trash my LVM2 (LUKS) data on the same drive?

Posted: 01 Sep 2023, 20:25
by recuperation
PartitionTrajic wrote: 30 Aug 2023, 09:21 I have two questions:

1. if I write this MS data will I trash my important 201gb of data?
Sorry, I can't foresee what is going on with your disk. Yes, you can trash everything. As you already recovered the content of your Microsoft data partition there is no reason to write this partition into the partition table. Duplicate your disk instead and you can try everything out!
Obviously you are trying to repair your failed disk without having cloned it.
The logfile shows at least two Microsoft partitions. The second one spans at least the whole disk. I don't know if Testdisk would let you write this one. If you mount your Microsoft partition in read/write mode you have a good chance of making recovery impossible.
I think it's weird to ask me to give you a green light for such a kamikaze mission. What if I said "Yes, no problem, go ahead!" and it fails? Common sense should have told you not to do that. Remember, you don't have an idea where your partitions are located.
2. From what I have given, can I work out the location of my 201gb partition so that I can look for the header? I am not sure if this will be marked as an LVM2 partition or something else. testdisk does not seem to find it.
I don't know. You are beyond the scope of Testdisk now.

Re: Will writing my MSDATA trash my LVM2 (LUKS) data on the same drive?

Posted: 02 Sep 2023, 00:07
by PartitionTrajic
Thanks again for taking the time to respond.

"I think it's weird to ask me to give you a green light for such a kamikaze mission. What if I said "Yes, no problem, go ahead!" and it fails?"

I'm asking questions to learn about testdisk. It doesn't mean I will follow a particular course of action.

If I create an image of this problem SSD with dd (byte for byte copy) can I run testdisk on that?

Note, the 50GB disk mentioned below is an empty partition. I found the size by mounting it and checking the details:

type: LUKS1
cipher: aes-xts-plain64
keysize: 512 bits
key location: dm-crypt
device: /dev/loop4
loop: /dev/nvme1n1
sector size: 512
offset: 4096 sectors
size: 519888304 sectors
mode: readonly


I think the map of my problem SSD goes like this

MS data start 32768
MS data end 1433632767
MS Data size 1433600000
50GB start 1433632768 blocks [0xaae7000000 byte offset]
50GB end 1433632768 + 95487448 = 1529120216 blocks (782909550592 byte offset)
50GB size 95487448

So I am looking for the new things at 1529120216 blocks = (782909550592 bytes)? Do I simply look at the log file and search for finding LVM magic numbers from this point?

"LVM magic value at 135492/49/29"

How do I interpret these numbers which are in the log file?

Re: Will writing my MSDATA trash my LVM2 (LUKS) data on the same drive?

Posted: 02 Sep 2023, 06:46
by recuperation
PartitionTrajic wrote: 02 Sep 2023, 00:07 I'm asking questions to learn about testdisk. It doesn't mean I will follow a particular course of action.
Use a backup and you can do what you want without harm.
If I create an image of this problem SSD with dd (byte for byte copy) can I run testdisk on that?
Please read the manual.

Note, the 50GB disk mentioned below is an empty partition. I found the size by mounting it and checking the details:

type: LUKS1
cipher: aes-xts-plain64
keysize: 512 bits
key location: dm-crypt
device: /dev/loop4
loop: /dev/nvme1n1
sector size: 512
offset: 4096 sectors
size: 519888304 sectors
mode: readonly


I think the map of my problem SSD goes like this

MS data start 32768
MS data end 1433632767
MS Data size 1433600000
50GB start 1433632768 blocks [0xaae7000000 byte offset]
50GB end 1433632768 + 95487448 = 1529120216 blocks (782909550592 byte offset)
50GB size 95487448

So I am looking for the new things at 1529120216 blocks = (782909550592 bytes)? Do I simply look at the log file and search for finding LVM magic numbers from this point?

"LVM magic value at 135492/49/29"

How do I interpret these numbers which are in the log file?
I never used LVM. I don't know how the internal structures of LVM work. I can't help you here.

I can only give you some generic advice:
Reproduce your broking setup by installing a new working one and compare your logically? broken disk with the healthy one.

Re: Will writing my MSDATA trash my LVM2 (LUKS) data on the same drive?

Posted: 02 Sep 2023, 12:49
by PartitionTrajic
Thanks again for your help. I'm juggling this along with taking my dad in and out of hospital, so it hasn't had my full attention.

I freed up some space to copy out the interesting part of the problem drive. Once it is copied I will experiment on it to see if I can find the LVM partition.
All times are UTC+01:00
Page 1 of 1

Powered by phpBB® Forum Software © phpBB Limited