Old versions of the EFS backup instructions used the following command:
adb shell "cat /dev/block/platform/*/by-name/EFS > /EFS.img"
At some point or under some condition, this stopped working and the backup were corrupted.