hello channinglan,
did you replace /boot/Image.sig as your customize kernel image?
that’s an incorrect process; when kernel developers developing their kernel, the best practice to workaround this issue is to delete Image.sig (assume that unfused board is used).
apparently, when kernel development is complete, a valid Image.sig must be generated and placed in /boot folder.