diff --git a/.github/workflows/build-gki-kernel.yml b/.github/workflows/build-gki-kernel.yml
index 1ea7ae9..18fabf7 100644
--- a/.github/workflows/build-gki-kernel.yml
+++ b/.github/workflows/build-gki-kernel.yml
@@ -456,7 +456,6 @@ jobs:
           BUILD_ARGS="-j${TH_COUNT} ${DEF_ARGS}"
 
           echo "=== Start make (logging to ${OUT}/error.log) ==="
-          chmod -R 777 *
           rm android/abi_gki_protected_exports_* || true
           make ${BUILD_ARGS} 2>&1 | tee ${OUT}/error.log || true
 
@@ -468,20 +467,6 @@ jobs:
           echo "Build finished at: $endtime"
           echo "=== Build step finished (check out/error.log for full log) ==="
 
-      - name: Apply KPM patches
-        run: |
-          if [[ "${{ inputs.enable_kpm }}" == "true" && "${{ inputs.root_solution }}" == "sukisu" ]]; then
-            cd $GITHUB_WORKSPACE/kernel/android_kernel_oneplus_sm8650/out/arch/arm64/boot
-            curl -LSs "https://raw.githubusercontent.com/SukiSU-Ultra/SukiSU_patch/refs/heads/main/kpm/patch_linux" -o patch
-            chmod 777 patch
-            ./patch
-            rm -rf Image
-            mv oImage Image
-            echo "✅ KPM patch finished"
-          else
-           echo "ℹ️ SCHED skipped"
-          fi
-
       - name: Check build results
         run: |
           set -euo pipefail
@@ -505,6 +490,20 @@ jobs:
             exit 1
           fi
 
+      - name: Apply KPM patches
+        run: |
+          if [[ "${{ inputs.enable_kpm }}" == "true" && "${{ inputs.root_solution }}" == "sukisu" ]]; then
+            cd $GITHUB_WORKSPACE/kernel/android_kernel_oneplus_sm8650/out/arch/arm64/boot
+            curl -LSs "https://raw.githubusercontent.com/SukiSU-Ultra/SukiSU_patch/refs/heads/main/kpm/patch_linux" -o patch
+            chmod 777 patch
+            ./patch
+            rm -rf Image
+            mv oImage Image
+            echo "✅ KPM patch finished"
+          else
+           echo "ℹ️ SCHED skipped"
+          fi
+
       - name: Replace Image in anykernel3
         run: |
           set -e