Hitachi/HGST HDD with Debian (LVM + LUKS encryption) and Win 7 dual boot data recovery
by stillalice from LinuxQuestions.org on (#51BF6)
Origin and description of the issue:
Last week, I tried to plug my headset jack into USB port of my ASUS laptop (with a Debian 4.19.0-8-amd64), by mistake. The laptop turned-off immediately and wouldn't turn-on anymore (circuit-cut?).
In order to attempt a recovery of the data stored on the HDD, a Hitachi/HGST Travelstar Z5K500 (HGST), I put it in an enclosure and plug it to another laptop, a Lenovo ThinkPad X200 (4.19.0-8-686-pae #1 SMP Debian 4.19.98-1 i686 GNU/Linux), but Linux cannot mount the HGST HDD. "fdisk -l /dev/sdc" returns "fdisk: unable to read /dev/sdc: Input/output error". "blkid /dev/sdc" doesn't return anything.
dmesg returns:
Code:[ 289.134867] usb 4-1: new high-speed USB device number 4 using ehci-pci
[ 289.340155] usb 4-1: New USB device found, idVendor=152d, idProduct=1337, bcdDevice= 5.08
[ 289.340161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 289.340166] usb 4-1: Product: jmicron
[ 289.340170] usb 4-1: Manufacturer: jmicron
[ 289.340174] usb 4-1: SerialNumber: 7F833EEF5DC0
[ 289.342544] scsi host4: uas
[ 289.347159] scsi 4:0:0:0: Direct-Access HGST HTS 545050A7E680 0508 PQ: 0 ANSI: 6
[ 289.348857] sd 4:0:0:0: Attached scsi generic sg1 type 0
[ 291.477663] sd 4:0:0:0: [sdb] 976773168 512-byte logical blocks: (500 GB/466 GiB)
[ 291.477666] sd 4:0:0:0: [sdb] 4096-byte physical blocks
[ 291.478030] sd 4:0:0:0: [sdb] Write Protect is off
[ 291.478033] sd 4:0:0:0: [sdb] Mode Sense: 5f 00 00 08
[ 291.478531] sd 4:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[ 291.481457] sd 4:0:0:0: [sdb] Optimal transfer size 33553920 bytes not a multiple of physical block size (4096 bytes)
[ 291.570527] sd 4:0:0:0: [sdb] tag#10 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE
[ 291.570532] sd 4:0:0:0: [sdb] tag#10 Sense Key : Aborted Command [current]
[ 291.570534] sd 4:0:0:0: [sdb] tag#10 Add. Sense: No additional sense information
[ 291.570538] sd 4:0:0:0: [sdb] tag#10 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00
[ 291.570541] print_req_error: I/O error, dev sdb, sector 0
[ 291.570547] Buffer I/O error on dev sdb, logical block 0, async page readsmartctl returns:
Code:Error 927 occurred at disk power-on lifetime: 1523 hours (63 days + 11 hours)
When the command that caused the error occurred, the device was active or idle.
After command completion occurred, registers were:
ER ST SC SN CL CH DH
-- -- -- -- -- -- --
40 51 28 e0 1c 5d 00 Error: WP at LBA = 0x005d1ce0 = 6102240
Commands leading to the command that caused the error were:
CR FR SC SN CL CH DH DC Powered_Up_Time Command/Feature_Name
-- -- -- -- -- -- -- -- ---------------- --------------------
61 08 00 f8 2b 83 40 00 00:20:34.346 WRITE FPDMA QUEUED
61 08 00 68 24 83 40 00 00:20:34.346 WRITE FPDMA QUEUED
61 08 00 48 24 83 40 00 00:20:34.345 WRITE FPDMA QUEUED
61 08 00 f0 19 83 40 00 00:20:34.345 WRITE FPDMA QUEUED
61 08 00 e0 19 83 40 00 00:20:34.345 WRITE FPDMA QUEUED
A dump of complete output of the following commands is available at https://pastebin.com/zMqtRCb3
All commands where executed on the Thinkpad X200 Laptop.
Partitions+OS structure on the ASUS Laptop that crashed was as below:
ASUS Laptop
a"a" boot partition on USB key
a""a"HGST HDD
a"a"partition A: FAT 32 (Windows 7)
a""a"partition B: LVM with LUKS (Debian)
If data cannot be retrieve by other means (advises from you guys and my own attempts), as Partition B contains data extremely important to me and to many people, I would ask some forensic professional for assistance, even if it means to pay several thousand dollars. If you know any such company please advise. Your help would be much appreciated.
Last week, I tried to plug my headset jack into USB port of my ASUS laptop (with a Debian 4.19.0-8-amd64), by mistake. The laptop turned-off immediately and wouldn't turn-on anymore (circuit-cut?).
In order to attempt a recovery of the data stored on the HDD, a Hitachi/HGST Travelstar Z5K500 (HGST), I put it in an enclosure and plug it to another laptop, a Lenovo ThinkPad X200 (4.19.0-8-686-pae #1 SMP Debian 4.19.98-1 i686 GNU/Linux), but Linux cannot mount the HGST HDD. "fdisk -l /dev/sdc" returns "fdisk: unable to read /dev/sdc: Input/output error". "blkid /dev/sdc" doesn't return anything.
dmesg returns:
Code:[ 289.134867] usb 4-1: new high-speed USB device number 4 using ehci-pci
[ 289.340155] usb 4-1: New USB device found, idVendor=152d, idProduct=1337, bcdDevice= 5.08
[ 289.340161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 289.340166] usb 4-1: Product: jmicron
[ 289.340170] usb 4-1: Manufacturer: jmicron
[ 289.340174] usb 4-1: SerialNumber: 7F833EEF5DC0
[ 289.342544] scsi host4: uas
[ 289.347159] scsi 4:0:0:0: Direct-Access HGST HTS 545050A7E680 0508 PQ: 0 ANSI: 6
[ 289.348857] sd 4:0:0:0: Attached scsi generic sg1 type 0
[ 291.477663] sd 4:0:0:0: [sdb] 976773168 512-byte logical blocks: (500 GB/466 GiB)
[ 291.477666] sd 4:0:0:0: [sdb] 4096-byte physical blocks
[ 291.478030] sd 4:0:0:0: [sdb] Write Protect is off
[ 291.478033] sd 4:0:0:0: [sdb] Mode Sense: 5f 00 00 08
[ 291.478531] sd 4:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[ 291.481457] sd 4:0:0:0: [sdb] Optimal transfer size 33553920 bytes not a multiple of physical block size (4096 bytes)
[ 291.570527] sd 4:0:0:0: [sdb] tag#10 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE
[ 291.570532] sd 4:0:0:0: [sdb] tag#10 Sense Key : Aborted Command [current]
[ 291.570534] sd 4:0:0:0: [sdb] tag#10 Add. Sense: No additional sense information
[ 291.570538] sd 4:0:0:0: [sdb] tag#10 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00
[ 291.570541] print_req_error: I/O error, dev sdb, sector 0
[ 291.570547] Buffer I/O error on dev sdb, logical block 0, async page readsmartctl returns:
Code:Error 927 occurred at disk power-on lifetime: 1523 hours (63 days + 11 hours)
When the command that caused the error occurred, the device was active or idle.
After command completion occurred, registers were:
ER ST SC SN CL CH DH
-- -- -- -- -- -- --
40 51 28 e0 1c 5d 00 Error: WP at LBA = 0x005d1ce0 = 6102240
Commands leading to the command that caused the error were:
CR FR SC SN CL CH DH DC Powered_Up_Time Command/Feature_Name
-- -- -- -- -- -- -- -- ---------------- --------------------
61 08 00 f8 2b 83 40 00 00:20:34.346 WRITE FPDMA QUEUED
61 08 00 68 24 83 40 00 00:20:34.346 WRITE FPDMA QUEUED
61 08 00 48 24 83 40 00 00:20:34.345 WRITE FPDMA QUEUED
61 08 00 f0 19 83 40 00 00:20:34.345 WRITE FPDMA QUEUED
61 08 00 e0 19 83 40 00 00:20:34.345 WRITE FPDMA QUEUED
A dump of complete output of the following commands is available at https://pastebin.com/zMqtRCb3
All commands where executed on the Thinkpad X200 Laptop.
- dmesg
- lshw
- hdparm -Tt /dev/sdc
- smartctl -d sat -a /dev/sdc
- smartctl -d sat -P show /dev/sdc
- lsblk -o +uuid,name
- lspci
- blkid
- blkid /dev/sdc
- find /sys -name dev
- ls -lR /dev/disk
- udevadm info -a -p /sys/block/sdc
- udevadm test /sys/block/sdc
- lscpu
Partitions+OS structure on the ASUS Laptop that crashed was as below:
ASUS Laptop
a"a" boot partition on USB key
a""a"HGST HDD
a"a"partition A: FAT 32 (Windows 7)
a""a"partition B: LVM with LUKS (Debian)
If data cannot be retrieve by other means (advises from you guys and my own attempts), as Partition B contains data extremely important to me and to many people, I would ask some forensic professional for assistance, even if it means to pay several thousand dollars. If you know any such company please advise. Your help would be much appreciated.