OmniPod Dash PDM (MT6580) bootloader unlock failing: DaHandler - [LIB]: Unknown lockstate or no lockstate

[Lost-Entrepreneur439]

Trying to unlock the bootloader on an OmniPod Dash PDM (MT6580), using the latest mtkclient commit and Ubuntu 22.04, I got the error "DaHandler - [LIB]: Unknown lockstate or no lockstate". Full log:

ivy@ivy-Phaser360:~/mtkclient$ python3 mtk.py da seccfg unlock
MTK Flash/Exploit Client Public V2.0.1 (c) B.Kerler 2018-2024
 
Preloader - Status: Waiting for PreLoader VCOM, please reconnect mobile to brom mode
 
Port - Hint:
 
Power off the phone before connecting.
For brom mode, press and hold vol up, vol dwn, or all hw buttons and connect usb.
For preloader mode, don't press any hw button and connect usb.
If it is already connected and on, hold power for 10 seconds to reset.
 
 
........Port - Device detected :)
Preloader - 	CPU:			MT6580()
Preloader - 	HW version:		0x0
Preloader - 	WDT:			0x10007000
Preloader - 	Uart:			0x11005000
Preloader - 	Brom payload addr:	0x100a00
Preloader - 	DA payload addr:	0x201000
Preloader - 	CQ_DMA addr:		0x1020ac00
Preloader - 	Var1:			0xac
Preloader - Disabling Watchdog...
Preloader - HW code:			0x6580
Preloader - Target config:		0x0
Preloader - 	SBC enabled:		False
Preloader - 	SLA enabled:		False
Preloader - 	DAA enabled:		False
Preloader - 	SWJTAG enabled:		False
Preloader - 	EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT:	False
Preloader - 	Root cert required:	False
Preloader - 	Mem read auth:		False
Preloader - 	Mem write auth:		False
Preloader - 	Cmd 0xC8 blocked:	False
Preloader - Get Target info
Preloader - 	HW subcode:		0x8a00
Preloader - 	HW Ver:			0xca00
Preloader - 	SW Ver:			0x0
DaHandler - Device is unprotected.
DaHandler - Device is in Preloader-Mode.
DALegacy - Uploading legacy da...
DALegacy - Uploading legacy stage 1 from MTK_DA_V5.bin
LegacyExt - Legacy DA2 is patched.
LegacyExt - Legacy DA2 CMD F0 is patched.
Preloader - Jumping to 0x200000
Preloader - Jumping to 0x200000: ok.
DALegacy - Got loader sync !
DALegacy - Reading nand info
DALegacy - Reading emmc info
DALegacy - ACK: 04029c
DALegacy - Setting stage 2 config ...
DALegacy - Uploading stage 2...
DALegacy - Successfully uploaded stage 2
DALegacy - Connected to stage2
DALegacy - m_int_sram_ret = 0x0
m_int_sram_size = 0x20000
m_ext_ram_ret = 0x0
m_ext_ram_type = 0x2
m_ext_ram_chip_select = 0x0
m_int_sram_ret = 0x0
m_ext_ram_size = 0x40000000
randomid = 0x271A207CE696162DEE833C63160D4568
 
m_emmc_ret = 0x0
m_emmc_boot1_size = 0x400000
m_emmc_boot2_size = 0x400000
m_emmc_rpmb_size = 0x400000
m_emmc_gp_size[0] = 0x0
m_emmc_gp_size[1] = 0x0
m_emmc_gp_size[2] = 0x0
m_emmc_gp_size[3] = 0x0
m_emmc_ua_size = 0x1d2000000
m_emmc_cid = 41483538fe014a432f6aa96b4700002e
m_emmc_fwver = 0000000000000000
 
DaHandler
DaHandler - [LIB]: Unknown lockstate or no lockstate
ivy@ivy-Phaser360:~/mtkclient$ 

[Lost-Entrepreneur439]

update - it seems like it was already in a kinda half-unlocked state? you cant flash in fastboot, but flashing twrp via mtkclient with the bootloader "locked", and it booted.