first. I use magiskboot unpack boot
second. I use kptools.exe with kpimg-android to patch it but can't work ,
PS C:\Users\Administrator\Documents\kp> .\kptools.exe -p --image .\Image --skey "YourKey" --kpimg kpimg-android --out kernel
[+] kernel image_size: 0x01fc3014
[+] kernel uefi header: false
[+] kernel load_offset: 0x00080000
[+] kernel kernel_size: 0x0247a000
[+] kernel page_shift: 12
[+] new kernel image ...
[+] linux_banner 1: Linux version 4.4.250-Xiaomi_SDM660-EAS-LA.UM.9.2.r1-01800-SDMxx0.0+ (runner@runnervmwffz4) (Android (6443078 based on r383902) clang version 11.0.1 (https://android.googlesource.com/toolchain/llvm-project b397f81060ce6d701042b782172ed13bee898b79)) #1 SMP PREEMPT Wed Feb 11 03:23:49 UTC 2026
[+] linux_banner offset: 0x118000f
[+] kernel version major: 4, minor: 4, patch: 250
[+] kallsyms_token_table offset: 0x01547100
[+] endian: little
[+] kallsyms_token_index offset: 0x01547500
[+] arm64 relocation kernel_va: 0xffffff80080ab000
[+] arm64 relocation table range: [0x0180ea40, 0x01b9f6e8), count: 0x00026087
[+] apply 0x00026080 relocation entries
[+] kallsyms_markers range: [0x01546a00, 0x01547060), count: 0x000000cb
[+] approximate kallsyms_addresses range: [0x0143b0b8, 0x01472c18) count: 0x00006f6c
[?] mismatch relo applied, subsequent operations may be undefined
[+] kallsyms_names offset: 0x014a0f00
[?] can't find kallsyms_num_syms, try: 0x00006f62
[?] no linux_banner, CONFIG_KALLSYMS_ALL=n
[+] names table vector index: 0x0000000e, pid_vnr index: 0x00000485
[+] pid_vnr verfied sp, insn: 0x910043fd
[+] vectors index: 14, offset: 0x00635000
[+] pid_vnr offset: 0x00698580
[+] kallsyms_addresses offset: 0x01461630
[+] kernel base address: 0xffffff800879be00
[+] layout kimg: 0x0,0x1fc3014, kpimg: 0x1fc4000,0x2c260, extra: 0x1ff0260,0x80, end: 0x1ff02e0, start: 0x247a000
[+] kpimg version: d00
[+] kpimg compile time: 11:13:10 Feb 10 2026
[+] kpimg config: android, release
[?] no symbol: tcp_init_sock
[-] /d/a/KernelPatch/KernelPatch/tools/symbol.c:47/get_symbol_offset_exit(); no symbol tcp_init_sock
echo 1 > /proc/sys/kernel/kptr_restrict
cat /proc/kallsyms > kallsyms-2.txt
kallsyms-2.txt
Image.gz
first. I use magiskboot unpack boot
second. I use kptools.exe with kpimg-android to patch it but can't work ,
kallsyms-2.txt
Image.gz