[Moto Z2 Play  Questions & Answers] bluejv:
I've never tried to unlock/root my z2 play (this one is my wife's), but it is now stuck in bootloader.

Selecting the options START, RECOVERY MODE, FACTORY MODE, BP TOOLS, and QCOM all fail with the same message:

Failed to verify hab image boot
failed to validate boot image
ERROR: Failed to pass validation, backup to fastboot

Since we never expected this issue to happen, usb debugging and allow oem unlock hasn't been enabled. We tried to use the "Rescue and Smart Assistant" from motorola, but it fails with:

Flashboot Flash Single Partition
Flash failed. Please try again

We are using the "ALBUS_C_OPSS27.76_12_28_20_cid50_subsidy_DEFAULT_regulatory_DEFAULT_CFC_SVC.xml" motorola suggested.

I've tried using fastboot and looking through various threads on using fastboot commands to flash stock firmware, but haven't found any success. Also tried doing the steps in the firmware's servicefile.xml with no success.

Here's the output from "fastboot getvar all":

(bootloader) version: 0.5
(bootloader) version-bootloader: moto-msm8953-C0.CD
(bootloader) product: albus
(bootloader) board: albus
(bootloader) secure: yes
(bootloader) hwrev: P4
(bootloader) radio: 1
(bootloader) storage-type: emmc
(bootloader) emmc: 64GB SKHYNIX HCG8a4 RV=08 PV=A2 FV=00000000000000A2
(bootloader) ram: 4GB SKHYNIX LP3 DIE=8Gb M5=06 M6=03 M7=00 M8=5F
(bootloader) cpu: MSM8953
(bootloader) serialno: ZY224WBXTH
(bootloader) cid: 0x0032
(bootloader) channelid: 0x8d
(bootloader) uid: B4C8C53E00000000000000000000
(bootloader) securestate: oem_locked
(bootloader) iswarrantyvoid: no
(bootloader) max-download-size: 534773760
(bootloader) reason: Fall-through from normal boot mode
(bootloader) imei: --REMOVED--
(bootloader) meid:
(bootloader) date: 03-19-2018
(bootloader) sku: XT1710-01
(bootloader) carrier_sku:
(bootloader) battid: SNN5985A
(bootloader) iccid:
(bootloader) cust_md5:
(bootloader) max-sparse-size: 268435456
(bootloader) current-time: "Thu Jan 1 1:47:35 UTC 1970"
(bootloader) ro.build.fingerprint[0]: motorola/albus_c/albus:8.0.0/OPSS2
(bootloader) ro.build.fingerprint[1]: 7.76-12-28-20/19:user/release-keys
(bootloader) poweroffalarm: 0
(bootloader) ro.build.version.full[0]: Blur_Version.27.461.19.albus_c.re
(bootloader) ro.build.version.full[1]: tail.en.US
(bootloader) ro.build.version.qcom: LA.UM.6.6.r1-04400-89xx.0
(bootloader) version-baseband: M8953P_41.50.07.67.03R ALBUS_NA_CUST
(bootloader) kernel.version[0]: Linux version 3.18.71-perf-gd304391 (hud
(bootloader) kernel.version[1]: soncm@ilclbld28) (gcc version 4.9.x 2015
(bootloader) kernel.version[2]: 0123 (prerelease) (GCC) ) #1 SMP PREEMPT
(bootloader) kernel.version[3]: Tue Jun 18 07:23:48 CDT 2019
(bootloader) sbl1.git: git=MBM-NG-VC0.CD-0-g4650d8f
(bootloader) rpm.git: git=bd19194
(bootloader) tz.git: git=20bded9-dirty
(bootloader) devcfg.git: git=20bded9-dirty
(bootloader) keymaster.git: git=20bded9-dirty
(bootloader) cmnlib.git: git=20bded9-dirty
(bootloader) cmnlib64.git: git=20bded9-dirty
(bootloader) prov.git: git=20bded9-dirty
(bootloader) aboot.git: git=MBM-NG-VC0.CD-0-g361b83a
(bootloader) frp-state: protected (210)
(bootloader) ro.carrier: retus
(bootloader) current-slot:
(bootloader) slot-suffixes: _a
(bootloader) slot-count: 1
(bootloader) slot-successful:_a: INVALID
(bootloader) slot-successful:_b: INVALID
(bootloader) slot-bootable:_a: INVALID
(bootloader) slot-bootable:_b: INVALID
(bootloader) slot-retry-count:_a: unknown
(bootloader) slot-retry-count:_b: unknown

(Sorry if I forgot to remove some private info... I only remember threads telling other people to remove IMEI)

edit:

We don't care about recovering any data, just want to get the phone working again. I got the bootloader unlock code from motorola, but it doesn't work. It says:

(bootloader) Check 'Allow OEM Unlock' in Android Settings > Developer
(bootloader) Options

Tried to use 2 different albus TWRP for recovery, but it can't validate (probably because I can't unlock bootloader)