Backup copy of the jffs2.img firmware for unifi ap pro

Hello everyone.

The unifi ac pro access point does not start. I want to flash it through the console cable, but unfortunately there is no backup copy of the firmware.

Maybe someone has a backup copy of the jffs2.img firmware for unifi ap pro? Please share it.

I want to try to flash as described in this article "Harder Soft-Unbricking a Ubiquiti Unifi UAP-Pro AP", the attached firmware is not available in the article. I tried to access this site through time machines, the firmware is downloaded, but it is broken.

Harder Soft-Unbricking a Ubiquiti Unifi UAP-Pro AP

UAP-Pro is completely different from AC Pro.

To return to stock, download stock image from Ubiquiti and install it using TFTP recovery. This is also the basis for recovering a bricked OpenWrt without serial. TFTP recovery only works with stock images because they must be signed. Once stock is running then you can repeat the OpenWrt installation process.

If you do have serial and want to (re)install OpenWrt, transfer and boot the initramfs image in RAM then use sysupgrade to flash the sysupgrade image.

When you try to install an image via TFTP according to the instructions, the access point reboots and nothing happens.
I want to try to reflash using these instructions, but unfortunately I donโ€™t have the firmware jffs2.img (maybe someone has it or tell me how I can download it from a working point?)
.bin images are not suitable for this method
ar7240> tftp 83000000 jffs2.img
ar7240>mtdparts
ar7240> mtdparts default
ar7240> saveenv
ar7240> protect off all
ar7240> erase 0x9f050000 +0xf60000
ar7240> cp.b 0x83000000 0x9f050000 0xf60000
ar7240> cmp.b 0x83000000 0x9f050000 0xf60000
ar7240> reset

if you want openwrt, in u-boot, bootm the KERNEL file from the link below, then sysupgrade using the sysupgrade image from the same page.
https://firmware-selector.openwrt.org/?version=23.05.3&target=ath79%2Fgeneric&id=ubnt_unifiac-pro

How to flash the kernel correctly?
I downloaded the firmware to the access point, entered the commands that were sent above, but after the reset command the access point reboots and displays the following:
ar7240> reset
Resetting...
U-Boot unifi-v1.6.15.278-g4ebbbcff (Mar 5 2018 - 23:40:54)

DRAM: 128 MB
Base:0x80000000, Top:0x88000000, Res logbuf:0xa7ffb000, log_magic:0xa5d4c96a kseg: 0xa0000000
Flash: 16 MB
PCIe WLAN Module found (tries: 1).
Net: eth0: 00:a4:3c:02:9a:64
eth0
Setting 0xb8116290 to 0x20402d0f
Board: Copyright Ubiquiti Networks Inc. 2014
Hit any key to stop autoboot: 0
Board: Ubiquiti Networks AR9344 board (e507-27.2122.0030.0030)
0. Name = u-boot, offset = 0, start_addr=9f000000, size=262144,start_sector=0, end_sector=3

  1. Name = u-boot-env, offset = 40000, start_addr=9f040000, size=65536,start_sector=4, end_sector=4
  2. Name = jffs2, offset = 50000, start_addr=9f050000, size=16121856,start_sector=5, end_sector=250
  3. Name = cfg, offset = fb0000, start_addr=9ffb0000, size=262144,start_sector=251, end_sector=254
  4. Name = EEPROM, offset = ff0000, start_addr=9fff0000, size=65536,start_sector=255, end_sector=255
    UBNT application initialized
    ERROR: Firmware Type Error!

paste the whole sequence.

bootm should boot the KERNEL (initramfs) file, getting you openwrt loaded into RAM.

if bootm doesn't cut it, try tftpboot, followed by bootm.

U-Boot unifi-v1.6.15.278-g4ebbbcff (Mar 5 2018 - 23:40:54)
DRAM: 128 MB
Base:0x80000000, Top:0x88000000, Res logbuf:0xa7ffb000, log_magic:0xa5d4c96a kse g: 0xa0000000
Flash: 16 MB
PCIe WLAN Module found (tries: 1).
Net: eth0: 00:a4:3c:02:9a:64
eth0
Setting 0xb8116290 to 0x20402d0f
Board: Copyright Ubiquiti Networks Inc. 2014
Hit any key to stop autoboot: 0
Board: Ubiquiti Networks AR9344 board (e507-27.2122.0030.0030)
0. Name = u-boot, offset = 0, start_addr=9f000000, size=262144,start_sector=0, end_sector=3

  1. Name = u-boot-env, offset = 40000, start_addr=9f040000, size=65536,start_sec tor=4, end_sector=4
  2. Name = jffs2, offset = 50000, start_addr=9f050000, size=16121856,start_secto r=5, end_sector=250
  3. Name = cfg, offset = fb0000, start_addr=9ffb0000, size=262144,start_sector=2 51, end_sector=254
  4. Name = EEPROM, offset = ff0000, start_addr=9fff0000, size=65536,start_sector =255, end_sector=255
    UBNT application initialized
    ERROR: Firmware Type Error!
    ar7240> tftp 83000000 kernel.bin
    Using eth0 device
    TFTP from server 192.168.1.254; our IP address is 192.168.1.20
    Filename 'kernel.bin'.
    Load address: 0x83000000
    Loading: #################################################################
    #################################################################
    #################################################################
    #################################################################
    #################################################################
    #################################################################
    #################################################################
    #################################################################
    #################################################################
    #################################################################
    #################################################################
    #################################################################
    #################################################################
    #################################################################
    #################################################################
    #################################################################
    ###########################################################
    done
    Bytes transferred = 5624391 (55d247 hex)
    ar7240> mtdparts
    device nor0 , # parts = 5
    #: name size offset mask_flags
    0: u-boot 0x00040000 0x00000000 0
    1: u-boot-env 0x00010000 0x00040000 0
    2: jffs2 0x00f60000 0x00050000 0
    3: cfg 0x00040000 0x00fb0000 0
    4: EEPROM 0x00010000 0x00ff0000 0

active partition: nor0,0 - (u-boot) 0x00040000 @ 0x00000000

defaults:
mtdids : nor0=ath-nor0
mtdparts: mtdparts=ath-nor0:256k(u-boot),64k(u-boot-env),15744k(jffs2),256k(cfg) ,64k(EEPROM)
ar7240> mtdparts default
ar7240> saveenv
Saving Environment to Flash...
Un-Protected 1 sectors
Erasing Flash.... done
Erased 1 sectors
Writing to Flash... write addr: 9f040000
done
Protected 1 sectors
ar7240> protect off all
Un-Protect Flash Bank # 1
ar7240> erase 0x9f050000 +0xf60000
................................................................................ ................................................................................ ................................................................................ ...... done
Erased 246 sectors
ar7240> cp.b 0x83000000 0x9f050000 0xf60000
Copy to Flash... write addr: 9f050000
done
ar7240> cmp.b 0x83000000 0x9f050000 0xf60000
Total of 16121856 bytes were the same
ar7240> reset

Resetting...

U-Boot unifi-v1.6.15.278-g4ebbbcff (Mar 5 2018 - 23:40:54)

DRAM: 128 MB
Base:0x80000000, Top:0x88000000, Res logbuf:0xa7ffb000, log_magic:0xa5d4c96a kse g: 0xa0000000
Flash: 16 MB
PCIe WLAN Module found (tries: 1).
Net: eth0: 00:a4:3c:02:9a:64
eth0
Setting 0xb8116290 to 0x20402d0f
Board: Copyright Ubiquiti Networks Inc. 2014
Hit any key to stop autoboot: 0
Board: Ubiquiti Networks AR9344 board (e507-27.2122.0030.0030)
0. Name = u-boot, offset = 0, start_addr=9f000000, size=262144,start_sector=0, end_sector=3

  1. Name = u-boot-env, offset = 40000, start_addr=9f040000, size=65536,start_sec tor=4, end_sector=4
  2. Name = jffs2, offset = 50000, start_addr=9f050000, size=16121856,start_secto r=5, end_sector=250
  3. Name = cfg, offset = fb0000, start_addr=9ffb0000, size=262144,start_sector=2 51, end_sector=254
  4. Name = EEPROM, offset = ff0000, start_addr=9fff0000, size=65536,start_sector =255, end_sector=255
    UBNT application initialized
    ERROR: Firmware Type Error!
    ar7240>
    ar7240> bootm

Booting image at 81000000 ...

Bad Magic Number
ar7240> tftpboot
*** Warning: no boot file name; using '1401A8C0.img'
Using eth0 device
TFTP from server 192.168.1.254; our IP address is 192.168.1.20
Filename '1401A8C0.img'.

when you enter the command, tftpboot requests an image '1401A8C0.img'

Rename would be a good start ?

uploaded
ar7240> tftpboot
*** Warning: no boot file name; using '1401A8C0.img'
Using eth0 device
TFTP from server 192.168.1.254; our IP address is 192.168.1.20
Filename '1401A8C0.img'.
Load address: 0x81000000
Loading: #################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
###########################################################
done
Bytes transferred = 5624391 (55d247 hex)

ar7240> bootm

Booting image at 81000000 ...

Image Name: MIPS OpenWrt Linux-5.15.150
Created: 2024-03-22 22:09:42 UTC
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 5624327 Bytes = 5.4 MB
Load Address: 80060000
Entry Point: 80060000
Verifying Checksum at 0x81000040 ...OK
Uncompressing Kernel Image ... ERROR: LzmaDecode.c, 543

Decoding error = 1
LZMA ERROR 1 - must RESET board to recover

Resetting...

U-Boot unifi-v1.6.15.278-g4ebbbcff (Mar 5 2018 - 23:40:54)

DRAM: 128 MB
Base:0x80000000, Top:0x88000000, Res logbuf:0xa7ffb000, log_magic:0xa5d4c96a kseg: 0xa0000000
Flash: 16 MB
PCIe WLAN Module found (tries: 1).
Net: eth0: 00:a4:3c:02:9a:64
eth0
Setting 0xb8116290 to 0x20402d0f
Board: Copyright Ubiquiti Networks Inc. 2014
Hit any key to stop autoboot: 0
Board: Ubiquiti Networks AR9344 board (e507-27.2122.0030.0030)
0. Name = u-boot, offset = 0, start_addr=9f000000, size=262144,start_sector=0, end_sector=3

  1. Name = u-boot-env, offset = 40000, start_addr=9f040000, size=65536,start_sector=4, end_sector=4
  2. Name = jffs2, offset = 50000, start_addr=9f050000, size=16121856,start_sector=5, end_sector=250
  3. Name = cfg, offset = fb0000, start_addr=9ffb0000, size=262144,start_sector=251, end_sector=254
  4. Name = EEPROM, offset = ff0000, start_addr=9fff0000, size=65536,start_sector=255, end_sector=255
    UBNT application initialized
    ERROR: Firmware Type Error!

Ok, now the sequence's correct.

Just to be sure, did I link to the correct device ?

I linked to the AC Pro, but you had an AP Pro, right ?

I'm sorry, I made a typo. I have AP pro

Now I'm trying with the correct firmware kernel
https://firmware-selector.openwrt.org/?version=23.05.3&target=ath79%2Fgeneric&id=ubnt_unifi-ap-pro

If you load to 81000000 the LZMA fails because the uncompressed image is large enough to overwrite the compressed data before it is finished. So load to 83000000 and boot there.

tftpboot 83000000 <filename>
bootm 83000000

OpenWrt should boot. Then scp the sysupgrade file to /tmp and use sysupgrade to install it.

Do not issue any mtd or flash commands in the bootloader. That is unnecessary and dangerous.

1 Like

In general, the error remains. Perhaps you need to select a specific firmware version?

ar7240> tftpboot 83000000 1401A8C0.img
Using eth0 device
TFTP from server 192.168.1.254; our IP address is 192.168.1.20
Filename '1401A8C0.img'.
Load address: 0x83000000
Loading: #################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
###########################################################
done
Bytes transferred = 5624391 (55d247 hex)
ar7240> bootm 83000000

Booting image at 83000000 ...

Image Name: MIPS OpenWrt Linux-5.15.150
Created: 2024-03-22 22:09:42 UTC
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 5624327 Bytes = 5.4 MB
Load Address: 80060000
Entry Point: 80060000
Verifying Checksum at 0x83000040 ...OK
Uncompressing Kernel Image ... OK

Starting kernel ...

[ 0.000000] Linux version 5.15.150 (builder@buildhost) (mips-openwrt-linux-musl-gcc (OpenWrt GCC 12.3.0 r23809-234f1a2efa) 12.3.0, GNU ld (GNU Binutils) 2.40.0) #0 Fri Mar 22 22:09:42 2024
[ 0.000000] printk: bootconsole [early0] enabled
[ 0.000000] CPU0 revision is: 0001974c (MIPS 74Kc)
[ 0.000000] MIPS: machine is Ubiquiti UniFi AC Pro
[ 0.000000] SoC: Atheros AR9344 rev 2
[ 0.000000] Initrd not found or empty - disabling initrd
[ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[ 0.000000] Zone ranges:
[ 0.000000] Normal [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 32480
[ 0.000000] Kernel command line: console=ttyS0,115200n8 rootfstype=squashfs,jffs2
[ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes, linear)
[ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes, linear)
[ 0.000000] Writing ErrCtl register=00000000
[ 0.000000] Readback ErrCtl register=00000000
[ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[ 0.000000] Memory: 106740K/131072K available (6082K kernel code, 597K rwdata, 780K rodata, 15316K init, 216K bss, 24332K reserved, 0K cma-reserved)
[ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[ 0.000000] NR_IRQS: 51
[ 0.000000] CPU clock: 800.000 MHz
[ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4778151116 ns
[ 0.000001] sched_clock: 32 bits at 400MHz, resolution 2ns, wraps every 5368709118ns
[ 0.005876] Calibrating delay loop... 398.13 BogoMIPS (lpj=1990656)
[ 0.070540] pid_max: default: 32768 minimum: 301
[ 0.074766] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[ 0.080239] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[ 0.091017] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.098358] futex hash table entries: 256 (order: -1, 3072 bytes, linear)
[ 0.103608] pinctrl core: initialized pinctrl subsystem
[ 0.108988] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[ 0.113914] thermal_sys: Registered thermal governor 'step_wise'
[ 0.124386] clocksource: Switched to clocksource MIPS
[ 0.133783] NET: Registered PF_INET protocol family
[ 0.137642] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear)
[ 0.143800] tcp_listen_portaddr_hash hash table entries: 1024 (order: 0, 4096 bytes, linear)
[ 0.150151] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[ 0.155971] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear)
[ 0.161691] TCP bind hash table entries: 1024 (order: 0, 4096 bytes, linear)
[ 0.166966] TCP: Hash tables configured (established 1024 bind 1024)
[ 0.171807] UDP hash table entries: 256 (order: 0, 4096 bytes, linear)
[ 0.176727] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes, linear)
[ 0.182219] NET: Registered PF_UNIX/PF_LOCAL protocol family
[ 0.186506] PCI: CLS 0 bytes, default 32
[ 0.244584] workingset: timestamp_bits=14 max_order=15 bucket_order=1
[ 0.253767] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.258164] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.285727] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[ 0.307444] pinctrl-single 1804002c.pinmux: 544 pins, size 68
[ 0.312664] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[ 0.319446] printk: console [ttyS0] disabled
[ 0.322690] 18020000.uart: ttyS0 at MMIO 0x18020000 (irq = 9, base_baud = 1562500) is a 16550A
%โ–’โ–’โ–’โ–’lโ–’Pmโ–’โ–’aโ–’โ–’โ–’โ–’โ–’โ–’"โ–’โ–’|โ–’โ–’T((9-7โ–’7&aโ–’โ–’โ–’-Oโ–’โ–’โ–’โ–’%w oโ–’สฉ_โ–’Pโ–’โ–’Hโ–’โ–’โ–’[|โ–’-โ–’โ–’L~โ–’โ–’โ–’โ–’-โ–’lPโ–’m)โ–’H % #โ–’-โ–’/](โ–’ีฌโ–’Kโ–’โ–’+โ–’-w(]โ–’Tโ–’โ–’โ–’Pโ–’โ–’Hโ–’โ–’zโ–’โ–’pA+โ–’โ–’โ–’&โ–’โ–’H๏ฑ…โ–’,vSโ–’โ–’%โ–’โ–’โ–’โ–’โ–’โ–’โ–’Pโ–’kltโ–’nnโ–’โ–’Pโ–’nโ–’โ–’|
โ–’โ–’
P+โ–’Bโ–’โ–’โ–’v7zโ–’โ–’โ–’Pโ–’โ–’Hfโ–’โ–’โ–’ึจrโ–’i|Aโ–’ั ~
kxz-zโ–’Pโ–’โ–’โ–’โ–’$xPโ–’tโ–’โ–’โ–’Nโ–’%โ–’โ–’โ–’ษฎโ–’โ–’โ–’ึจ(P|Aโ–’โ–’+Pโ–’-โ–’โ–’pโ–’lโ–’โ–’โ–’โ–’โ–’jrโ–’rโ–’zโ–’โ–’ษ%โ–’โ–’โ–’โ–’/โ–’โ–’Pโ–’-โ–’DP
โ–’~โ–’.โ–’โ–’โ–’ศจโ–’lโ–’BPโ–’โ–’โ–’โ–’โ–’(Pโ–’tnโ–’โ–’Nโ–’%โ–’โ–’โ–’โ–’lโ–’eโ–’-โ–’DPAzvtโ–’โ–’โ–’ศจโ–’pโ–’โ–’Pโ–’โ–’โ–’โ–’โ–’(Pโ–’nโ–’โ–’|[โ–’โ–’โ–’H#โ–’โ–’โ–’โ–’๋จกEdโ–’tโ–’โ–’|
โ–’AApโ–’@โ–’โ–’โ–’Pโ–’โ–’HCโ–’
โ–’โ–’Pโ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’%โ–’โ–’ โ–’โ–’โ–’โ–’โ–’โ–’Pโ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’ุซi โ–’โ–’P-โ–’โ–’&โ–’Pโ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’,โ–’โ–’
โ–’โ–’~โ–’mi %โ–’โ–’โ–’bโ–’โ–’โ–’Pโ–’โ–’โ–’โ–’@,โ–’โ–’โ–’โ–’,โ–’โ–’โ–’
โ–’โ–’โ–’%โ–’โ–’โ–’,โ–’e(โ–’โ–’โ–’โ–’โ–’,โ–’โ–’โ–’โ–’โ–’โ–’โ–’,โ–’โ–’
Atโ–’โ–’โ–’%โ–’โ–’โ–’โ–’.โ–’โ–’Pโ–’โ–’โ–’โ–’,โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’tZโ–’Pโ–’โ–’@โ–’โ–’&โ–’โ–’โ–’(โ–’โ–’โ–’โ–’โ–’P`โ–’โ–’โ–’vโ–’(โ–’โ–’zโ–’(โ–’โ–’โ–’tโ–’โ–’โ–’hโ–’โ–’+โ–’โ–’Jโ–’โ–’%โ–’โ–’โ–’Cโ–’โ–’&โ–’โ–’โ–’โ–’Dxโ–’โ–’hโ–’xโ–’(โ–’โ–’,โ–’โ–’โ–’โ–’โ–’(โ–’+ัชโ–’โ–’z %โ–’สฑcโ–’โ–’&โ–’;nโ–’โ–’โ–’โ–’โ–’โ–’/โ–’โ–’Mโ–’-โ–’[tืขโ–’%โ–’โ–’ยฑโ–’โ–’"โ–’โ–’โ–’oโ–’โ–’.โ–’โ–’โ–’,โ–’โ–’โ–’'โ–’โ–’โ–’โ–’,โ–’โ–’nPูฃP(โ–’โ–’โ–’j~็€กโ–’hrโ–’+โ–’โ–’%โ–’โ–’ยฑโ–’โ–’โ–’Pโ–’โ–’โ–’v-โ–’vโ–’โ–’gโ–’DTโ–’{โ–’โ–’โ–’hโ–’jNโ–’%โ–’โ–’ยฑBโ–’โ–’&7d~โ–’.โ–’โ–’nโ–’Pโ–’.P#โ–’โ–’โ–’%โ–’โ–’๏ฟฝBโ–’โ–’โ–’ymnPโ–’โ–’m`iโ–’zโ–’hโ–’โ–’โ–’โ–’%โ–’โ–’ยฑโ–’โ–’cโ–’โ–’f-โ–’dzโ–’โ–’vโ–’โ–’nFxfโ–’โ–’+~z|โ–’N(โ–’โ–’โ–’h-โ–’โ–’&โ–’[tโ–’-โ–’โ–’tืจ+โ–’%Ppkโ–’่ฌน|โ–’h-โ–’Aโ–’โ–’k-โ–’โ–’(โ–’jPโ–’Pโ–’kvโ–’+โ–’jtโ–’โ–’P;pโ–’โ–’(~โ–’rโ–’โ–’nูฎ(โ–’Ptโ–’ู€โ–’(xโ–’k"%โ–’ยฑโ–’โ–’โ–’โ–’"Xโ–’โ–’โ–’โ–’โ–’#โ–’pโ–’.โ–’ยนโ–’โ–’โ–’hโ–’โ–’โ–’lPโ–’-โ–’โ–’~Khโ–’Pโ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’ %โ–’โ–’สฑโ–’โ–’โ–’[โ–’jโ–’โ–’โ–’โ–’ (โ–’ยฑโ–’oโ–’Pโ–’โ–’โ–’โ–’Vโ–’hโ–’โ–’jaโ–’ูซipุญโ–’โ–’โ–’ r|โ–’Hโ–’โ–’โ–’โ–’โ–’โ–’โ–’hmโ–’โ–’โ–’โ–’โ–’lvโ–’-โ–’โ–’โ–’โ–’vโ–’โ–’+Pโ–’โ–’โ–’Zโ–’%โ–’โ–’โ–’oโ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’!$tโ–’jPโ–’โ–’iโ–’โ–’| (โ–’ยฑโ–’,โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’,โ–’โ–’โ–’โ–’โ–’โ–’ โ–’สฑโ–’โ–’lโ–’,โ–’โ–’โ–’โ–’โ–’โ–’,โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’'โ–’r[โ–’%โ–’โ–’ยฑลฌโ–’โ–’โ–’โ–’
โ–’ๅฌตโ–’Fโ–’dโ–’โ–’โ–’โ–’โ–’Vโ–’,โ–’โ–’.โ–’ %โ–’โ–’ยฑ"โ–’โ–’&โ–’Bโ–’โ–’โ–’โ–’โ–’eโ–’โ–’โ–’โ–’,โ–’โ–’โ–’โ–’,โ–’โ–’โ–’โ–’โ–’
%โ–’โ–’โ–’โ–’&โ–’โ–’(โ–’
fโ–’Cnโ–’โ–’โ–’โ–’"Pโ–’โ–’#โ–’โ–’์ฑกCโ–’โ–’%โ–’โ–’ยฑโ–’,โ–’โ–’โ–’(โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’"%โ–’๊ฑ‚โ–’โ–’โ–’,โ–’โ–’โ–’โ–’โ–’โ–’โ–’b%โ–’Xโ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’lโ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’nโ–’(โ–’โ–’โ–’โ–’โ–’%โ–’ (โ–’ยฑโ–’โ–’โ–’โ–’(โ–’โ–’โ–’โ–’;V[โ–’ โ–’๊ฑทโ–’nrโ–’โ–’โ–’โ–’โ–’lโ–’โ–’Xโ–’โ–’lโ–’โ–’%โ–’โ–’ยฑโ–’lโ–’5โ–’โ–’
&โ–’โ–’,โ–’Xโ–’โ–’โ–’โ–’ %โ–’โ–’ยฑโ–’lโ–’โ–’โ–’nโ–’โ–’"โ–’โ–’โ–’[a`โ–’"โ–’lโ–’โ–’โ–’Pโ–’โ–’h-โ–’โ–’&โ–’drโ–’-โ–’โ–’โ–’โ–’
hx~โ–’(โ–’โ–’โ–’ (โ–’ยฑโ–’โ–’โ–’[โ–’
โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’h
%โ–’โ–’ยฑโ–’mโ–’j|โ–’(โ–’itโ–’X
%โ–’โ–’ยฑโ–’โ–’โ–’{rโ–’-/โ–’โ–’^โ–’โ–’EXโ–’โ–’
โ–’โ–’jjโ–’โ–’y(tโ–’riโ–’โ–’iโ–’tโ–’(iโ–’โ–’.โ–’โ–’โ–’โ–’โ–’โ–’%โ–’โ–’ยฑโ–’โ–’โ–’โ–’โ–’Aโ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’,โ–’โ–’โ–’โ–’,โ–’โ–’โ–’cPโ–’,โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’,โ–’โ–’โ–’l-โ–’โ–’%โ–’โ–’สฑโ–’โ–’oโ–’โ–’โ–’โ–’โ–’โ–’cPโ–’lโ–’โ–’โ–’โ–’โ–’โ–’โ–’
โ–’โ–’โ–’.)โ–’โ–’โ–’โ–’,โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’(โ–’โ–’,โ–’โ–’ โ–’๊ฑณโ–’lโ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’,โ–’โ–’โ–’โ–’โ–’โ–’Drโ–’(โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’"Pโ–’โ–’
โ–’โ–’โ–’โ–’
โ–’โ–’โ–’โ–’hnโ–’โ–’&โ–’โ–’โ–’โ–’โ–’B!โ–’โ–’โ–’Bโ–’โ–’โ–’โ–’โ–’โ–’โ–’(โ–’โ–’โ–’,โ–’โ–’,โ–’โ–’โ–’โ–’โ–’โ–’โ–’lPโ–’Fโ–’klโ–’โ–’Pโ–’โ–’hโ–’โ–’&โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’/โ–’โ–’โ–’่นฑโ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’ โ–’jโ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’,โ–’โ–’โ–’โ–’โ–’โ–’Cโ–’โ–’&โ–’โ–’โ–’โ–’โ–’โ–’โ–’ โ–’โ–’cโ–’&โ–’โ–’|โ–’X %โ–’โ–’สฑcโ–’โ–’&โ–’โ–’โ–’.โ–’โ–’โ–’Xโ–’โ–’Br %โ–’โ–’k,โ–’โ–’lโ–’,โ–’Drโ–’oโ–’โ–’T %โ–’โ–’k,โ–’qPโ–’,โ–’โ–’โ–’โ–’Xโ–’โ–’โ–’โ–’ %โ–’โ–’k,โ–’โ–’oPโ–’,โ–’dPโ–’oโ–’โ–’โ–’%โ–’ (โ–’k,โ–’โ–’โ–’Pโ–’,โ–’โ–’/โ–’โ–’โ–’Xโ–’โ–’/โ–’โ–’%โ–’โ–’k,โ–’โ–’โ–’Pโ–’,โ–’dXโ–’โ–’โ–’Xโ–’dXโ–’%โ–’โ–’k,โ–’โ–’eโ–’2โ–’โ–’โ–’oโ–’โ–’โ–’โ–’โ–’Nโ–’โ–’โ–’โ–’โ–’Cโ–’โ–’โ–’dVโ–’o9โ–’โ–’โ–’โ–’โ–’โ–’โ–’"โ–’โ–’&โ–’โ–’โ–’Z;o9โ–’โ–’Zโ–’ (โ–’lโ–’โ–’โ–’โ–’โ–’โ–’์ฑ™โ–’Xโ–’โ–’์™%โ–’โ–’lโ–’โ–’โ–’Pโ–’,โ–’dVโ–’โ–’โ–’Xโ–’Nnโ–’โ–’%โ–’โ–’lโ–’โ–’ePโ–’,โ–’$โ–’โ–’โ–’Xโ–’โ–’$โ–’โ–’%โ–’โ–’alโ–’โ–’โ–’Pโ–’,โ–’$pโ–’oโ–’โ–’tZโ–’ (โ–’alโ–’โ–’โ–’Pโ–’,โ–’โ–’Xโ–’โ–’Xโ–’โ–’โ–’X %โ–’โ–’aโ–’โ–’โ–’eโ–’2โ–’โ–’โ–’โ–’Xโ–’Nโ–’โ–’โ–’%โ–’โ–’aโ–’โ–’โ–’โ–’Pโ–’,โ–’#rโ–’oโ–’โ–’โ–’/โ–’โ–’โ–’โ–’โ–’โ–’mโ–’โ–’,โ–’CRโ–’oโ–’โ–’โ–’โ–’Dโ–’โ–’โ–’โ–’โ–’โ–’.โ–’โ–’,โ–’CPโ–’oโ–’โ–’โ–’ลŠโ–’^โ–’โ–’โ–’โ–’โ–’nโ–’,โ–’โ–’โ–’โ–’Xโ–’โ–’โ–’ %โ–’โ–’kโ–’โ–’cโ–’Pโ–’,โ–’CPโ–’oโ–’โ–’โ–’ลŠโ–’\โ–’โ–’โ–’bโ–’Pโ–’,โ–’โ–’โ–’โ–’โ–’Xโ–’โ–’โ–’%โ–’โ–’kโ–’"โ–’Pโ–’,โ–’Dโ–’โ–’โ–’โ–’Xโ–’Dโ–’โ–’%โ–’โ–’k์ตตโ–’Pโ–’,โ–’Dโ–’โ–’oโ–’โ–’โ–’โ–’โ–’โ–’\โ–’โ–’โ–’โ–’-โ–’โ–’โ–’Dโ–’โ–’o9โ–’โ–’โ–’โ–’โ–’%โ–’โ–’โ–’์ฝนโ–’Pโ–’,โ–’โ–’jโ–’โ–’โ–’Xโ–’โ–’jโ–’โ–’โ–’โ–’@โ–’โ–’โ–’%โ–’โ–’kDโ–’Jโ–’'ัชโ–’โ–’โ–’โ–’โ–’โ–’'โ–’,โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’,ยกโ–’โ–’โ–’โ–’
hPโ–’,โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’โ–’$.โ–’โ–’โ–’ %โ–’โ–’k$โ–’โ–’mโ–’%โ–’โ–’kโ–’โ–’mโ–’ โ–’โ–’(prโ–’mPโ–’โ–’hโ–’*P+โ–’โ–’ %โ–’โ–’k,โ–’โ–’nูญ*Al|rโ–’โ–’โ–’โ–’โ–’โ–’v
cn|โ–’rโ–’nโ–’โ–’ %โ–’โ–’k,โ–’โ–’eโ–’Fz~โ–’โ–’hโ–’hโ–’โ–’โ–’\8โ–’

U-Boot unifi-v1.6.15.278-g4ebbbcff (Mar 5 2018 - 23:40:54)

DRAM: 128 MB
Base:0x80000000, Top:0x88000000, Res logbuf:0xa7ffb000, log_magic:0x8e0300d4 kseg: 0xa0000000
Flash: 16 MB
PCIe WLAN Module found (tries: 1).
Net: eth0: 00:a4:3c:02:9a:64
eth0
Setting 0xb8116290 to 0x20402d0f
Board: Copyright Ubiquiti Networks Inc. 2014
Hit any key to stop autoboot: 0
Board: Ubiquiti Networks AR9344 board (e507-27.2122.0030.0030)
0. Name = u-boot, offset = 0, start_addr=9f000000, size=262144,start_sector=0, end_sector=3

  1. Name = u-boot-env, offset = 40000, start_addr=9f040000, size=65536,start_sector=4, end_sector=4
  2. Name = jffs2, offset = 50000, start_addr=9f050000, size=16121856,start_sector=5, end_sector=250
  3. Name = cfg, offset = fb0000, start_addr=9ffb0000, size=262144,start_sector=251, end_sector=254
  4. Name = EEPROM, offset = ff0000, start_addr=9fff0000, size=65536,start_sector=255, end_sector=255
    UBNT application initialized
    ERROR: Firmware Type Error!

The access point does not like the firmware. Is it normal to rename the firmware with the bin extension to the img extension?

If it really is an AC Pro (round indoor AP), you should be using this file:
https://downloads.openwrt.org/releases/23.05.3/targets/ath79/generic/openwrt-23.05.3-ath79-generic-ubnt_unifiac-pro-initramfs-kernel.bin
which of course can be renamed to something simple like fw.bin. The file extension does not matter.

Yes, that's the access point. but with this firmware it is not flashed. the error is still the same

The initram build is not to be flashed. It is used to install the sysupgrade build by running the initram once in RAM.

When it reboots by itself that almost certainly means you're using the wrong firmware. If the serial console becomes garbled and eventually stops (because the boot is complete) but it does not reboot by itself, you can log in by ssh.

Seems the serial speed changes here...