-1 usually means that a request was canceled or didn’t complete but that doesn’t look like the case here though maybe it is because 6 and 7 look to be the same or similar resources (though so do 2 and 3 so maybe something funky is going on with the request processing.
For better or worse, the early hints impacting TTFB is expected and to spec for navigation timing. It could be useful to have a separate TTFB that measures the time to the first byte of payload data.
If you look at the dev tools timeline view it can probably tell you what script code is executing there but from the look of the pink chunks in the waterfall it is probably the same inline code that runs at ~1.4s in the second waterfall and timing just happens to have it running before LCP.