Use M5Burner, erase the firmware first and then burn UIFlow2 to recover.