Visual studio fails with windows template.

[personnumber3377]

Hi!

Running make build in templates/windows/ causes this error for me:

(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/templates/windows # make build
make[1]: Entering directory '/root/research/kAFL/kafl/examples/templates/windows'
packer init windows.pkr.hcl
source /root/research/kAFL/kafl/examples/templates/windows/../../venv/bin/activate && packer build -var-file win10.pkrvars.hcl windows.pkr.hcl
qemu.windows: output will be in this color.

==> qemu.windows: Retrieving ISO
==> qemu.windows: Trying https://go.microsoft.com/fwlink/p/?LinkID=2208844&clcid=0x409&culture=en-us&country=US
==> qemu.windows: Trying https://go.microsoft.com/fwlink/p/?LinkID=2208844&checksum=sha256%3Aef7312733a9f5d7d51cfa04ac497671995674ca5e1058d5164d6028f0938d668&clcid=0x409&country=US&culture=en-us
==> qemu.windows: https://go.microsoft.com/fwlink/p/?LinkID=2208844&checksum=sha256%3Aef7312733a9f5d7d51cfa04ac497671995674ca5e1058d5164d6028f0938d668&clcid=0x409&country=US&culture=en-us => /root/.cache/packer/d731b3f758e61d53033aa8a67d3d8a3050aa1122.iso
==> qemu.windows: Creating floppy disk...
==> qemu.windows: Copying files flatly from floppy_files
==> qemu.windows: Copying file: answer_files/10/Autounattend.xml
==> qemu.windows: Copying file: scripts/fixnetwork.ps1
==> qemu.windows: Copying file: scripts/setup_winrm_public.bat
==> qemu.windows: Done copying files from floppy_files
==> qemu.windows: Collecting paths from floppy_dirs
==> qemu.windows: Resulting paths from floppy_dirs : []
==> qemu.windows: Done copying paths from floppy_dirs
==> qemu.windows: Copying files from floppy_content
==> qemu.windows: Done copying files from floppy_content
==> qemu.windows: Found port for communicator (SSH, WinRM, etc): 2660.
==> qemu.windows: Looking for available port between 5900 and 6000 on 0.0.0.0
==> qemu.windows: Starting VM, booting from CD-ROM
==> qemu.windows: The VM will be run headless, without a GUI. If you want to
==> qemu.windows: view the screen of the VM, connect via VNC without a password to
==> qemu.windows: vnc://0.0.0.0:5933
==> qemu.windows: Overriding default Qemu arguments with qemuargs template option...
==> qemu.windows: Waiting 5s for boot...
==> qemu.windows: Connecting to VM via VNC (0.0.0.0:5933)
==> qemu.windows: Typing the boot commands over VNC...
==> qemu.windows: Not using a NetBridge -- skipping StepWaitGuestAddress
==> qemu.windows: Using WinRM communicator to connect: 127.0.0.1
==> qemu.windows: Waiting for WinRM to become available...
==> qemu.windows: WinRM connected.
==> qemu.windows: Connected to WinRM!
==> qemu.windows: Provisioning with Ansible...
==> qemu.windows: Not using Proxy adapter for Ansible run:
==> qemu.windows: 	Using WinRM Password from Packer communicator...
==> qemu.windows: Executing Ansible: ansible-playbook -e packer_build_name="windows" -e packer_builder_type=qemu -e packer_http_addr=10.0.2.2:0 -e ansible_winrm_scheme=http -e ansible_proxy= -e ansible_password=***** -i /tmp/packer-provisioner-ansible2324839431 /root/research/kAFL/kafl/examples/templates/windows/playbook.yml
==> qemu.windows:
==> qemu.windows: PLAY [Deploy] ******************************************************************
==> qemu.windows:
==> qemu.windows: TASK [Gathering Facts] *********************************************************
==> qemu.windows: ok: [default]
==> qemu.windows:
==> qemu.windows: TASK [Configure IE proxy settings to apply to all users] ***********************
==> qemu.windows: skipping: [default]
==> qemu.windows:
==> qemu.windows: TASK [Configure IE proxy settings] *********************************************
==> qemu.windows: skipping: [default]
==> qemu.windows:
==> qemu.windows: TASK [Import IE proxy configuration to WinHTTP] ********************************
==> qemu.windows: skipping: [default]
==> qemu.windows:
==> qemu.windows: TASK [Ensure Chocolatey installed from internal repo] **************************
==> qemu.windows: [WARNING]: Chocolatey was missing from this system, so it was installed during
==> qemu.windows: this task run.
==> qemu.windows: changed: [default]
==> qemu.windows:
==> qemu.windows: TASK [Set chocolatey proxy] ****************************************************
==> qemu.windows: skipping: [default]
==> qemu.windows:
==> qemu.windows: TASK [Disable uncessary services] **********************************************
==> qemu.windows: changed: [default] => (item=WSearch)
==> qemu.windows: changed: [default] => (item=Spooler)
==> qemu.windows:
==> qemu.windows: TASK [Disable OneDrive] ********************************************************
==> qemu.windows: changed: [default]
==> qemu.windows:
==> qemu.windows: TASK [Disable Cortana] *********************************************************
==> qemu.windows: changed: [default]
==> qemu.windows:
==> qemu.windows: TASK [Disable Defender] ********************************************************
==> qemu.windows: changed: [default]
==> qemu.windows:
==> qemu.windows: TASK [Download Visual Studio 2022 community installer] *************************
==> qemu.windows: changed: [default]
==> qemu.windows:
==> qemu.windows: TASK [Install Visual Studio Native Desktop Workload] ***************************
==> qemu.windows: fatal: [default]: FAILED! => {"changed": true, "cmd": "vs_community.exe --quiet --wait --norestart --add Microsoft.VisualStudio.Workload.NativeDesktop", "delta": "0:03:36.406296", "end": "2026-07-27 03:30:26.707406", "msg": "non-zero return code", "rc": 1603, "start": "2026-07-27 03:26:50.301110", "stderr": "", "stderr_lines": [], "stdout": "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1033\\help.html...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1046\\help.html...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1040\\help.html...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1049\\help.html...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\2052\\help.html...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1029\\help.html...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1031\\help.html...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1041\\help.html...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1028\\help.html...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1045\\help.html...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1055\\help.html...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\3082\\help.html...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1036\\help.html...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1042\\help.html...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\vs_setup_bootstrapper.exe...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.C2RSignatureReader.Interop.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.C2RSignatureReader.Native.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.Identity.Client.Broker.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.Identity.Client.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.Identity.Client.Extensions.Msal.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.Identity.Client.NativeInterop.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.IdentityModel.Abstractions.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.VisualStudio.RemoteControl.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.VisualStudio.Setup.Common.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.VisualStudio.Setup.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.VisualStudio.Setup.Download.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.VisualStudio.Telemetry.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.VisualStudio.Utilities.Internal.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\runtimes\\win-x64\\native\\msalruntime.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\runtimes\\win-arm64\\native\\msalruntime_arm64.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\runtimes\\win-x86\\native\\msalruntime_x86.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Newtonsoft.Json.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\System.Memory.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\System.Runtime.CompilerServices.Unsafe.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\VSInstallerElevationService.Contracts.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\zh-Hant\\vs_setup_bootstrapper.resources.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\pt-BR\\vs_setup_bootstrapper.resources.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\de\\vs_setup_bootstrapper.resources.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\fr\\vs_setup_bootstrapper.resources.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\ko\\vs_setup_bootstrapper.resources.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\it\\vs_setup_bootstrapper.resources.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\cs\\vs_setup_bootstrapper.resources.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\ja\\vs_setup_bootstrapper.resources.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\zh-Hans\\vs_setup_bootstrapper.resources.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\tr\\vs_setup_bootstrapper.resources.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\es\\vs_setup_bootstrapper.resources.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\pl\\vs_setup_bootstrapper.resources.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\ru\\vs_setup_bootstrapper.resources.dll...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\vs_setup_bootstrapper.config...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\vs_setup_bootstrapper.exe.config...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\detection.json...\r\r\nPreparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\vs_setup_bootstrapper.json...\r\r\n", "stdout_lines": ["Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1033\\help.html...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1046\\help.html...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1040\\help.html...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1049\\help.html...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\2052\\help.html...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1029\\help.html...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1031\\help.html...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1041\\help.html...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1028\\help.html...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1045\\help.html...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1055\\help.html...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\3082\\help.html...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1036\\help.html...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\HelpFile\\1042\\help.html...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\vs_setup_bootstrapper.exe...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.C2RSignatureReader.Interop.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.C2RSignatureReader.Native.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.Identity.Client.Broker.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.Identity.Client.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.Identity.Client.Extensions.Msal.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.Identity.Client.NativeInterop.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.IdentityModel.Abstractions.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.VisualStudio.RemoteControl.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.VisualStudio.Setup.Common.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.VisualStudio.Setup.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.VisualStudio.Setup.Download.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.VisualStudio.Telemetry.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Microsoft.VisualStudio.Utilities.Internal.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\runtimes\\win-x64\\native\\msalruntime.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\runtimes\\win-arm64\\native\\msalruntime_arm64.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\runtimes\\win-x86\\native\\msalruntime_x86.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\Newtonsoft.Json.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\System.Memory.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\System.Runtime.CompilerServices.Unsafe.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\VSInstallerElevationService.Contracts.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\zh-Hant\\vs_setup_bootstrapper.resources.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\pt-BR\\vs_setup_bootstrapper.resources.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\de\\vs_setup_bootstrapper.resources.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\fr\\vs_setup_bootstrapper.resources.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\ko\\vs_setup_bootstrapper.resources.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\it\\vs_setup_bootstrapper.resources.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\cs\\vs_setup_bootstrapper.resources.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\ja\\vs_setup_bootstrapper.resources.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\zh-Hans\\vs_setup_bootstrapper.resources.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\tr\\vs_setup_bootstrapper.resources.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\es\\vs_setup_bootstrapper.resources.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\pl\\vs_setup_bootstrapper.resources.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\ru\\vs_setup_bootstrapper.resources.dll...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\vs_setup_bootstrapper.config...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\vs_setup_bootstrapper.exe.config...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\detection.json...", "", "Preparing: C:\\Users\\vagrant\\AppData\\Local\\Temp\\184b95d94dbec0439a\\vs_bootstrapper_d15\\vs_setup_bootstrapper.json...", ""]}
==> qemu.windows:
==> qemu.windows: PLAY RECAP *********************************************************************
==> qemu.windows: default                    : ok=7    changed=6    unreachable=0    failed=1    skipped=4    rescued=0    ignored=0
==> qemu.windows:
==> qemu.windows: Provisioning step had errors: Running the cleanup provisioner, if present...
==> qemu.windows: Deleting output directory...
Build 'qemu.windows' errored after 11 minutes 8 seconds: Error executing Ansible: Non-zero exit status: exit status 2

==> Wait completed after 11 minutes 8 seconds

==> Some builds didn't complete successfully and had errors:
--> qemu.windows: Error executing Ansible: Non-zero exit status: exit status 2

==> Builds finished but no artifacts were created.
make[1]: *** [Makefile:14: build] Error 1
make[1]: Leaving directory '/root/research/kAFL/kafl/examples/templates/windows'

[personnumber3377]

==> qemu.windows: fatal: [default]: FAILED! => {"changed": true, "debug": [], "error": [{"category_info": {"activity": "", "category": "OperationStopped", "category_id": 14, "reason": "RuntimeException", "target_name": "Visual Studio failed with exit code 1603", "target_type": "String"}, "error_details": null, "exception": {"help_link": null, "hresult": -2146233087, "inner_exception": null, "message": "Visual Studio failed with exit code 1603", "source": null, "type": "System.Management.Automation.RuntimeException"}, "fully_qualified_error_id": "Visual Studio failed with exit code 1603", "output": "Visual Studio failed with exit code 1603\r\nAt line:25 char:5\r\n+     throw \"Visual Studio failed with exit code $($p.ExitCode)\"\r\n+     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r\n    + CategoryInfo          : OperationStopped: (Visual Studio failed with exit code 1603:String) [], RuntimeException\r\n    + FullyQualifiedErrorId : Visual Studio failed with exit code 1603\r\n \r\n", "pipeline_iteration_info": [], "script_stack_trace": "at <ScriptBlock>, <No file>: line 25", "target_object": "Visual Studio failed with exit code 1603"}], "host_err": "", "host_out": "Exit code = 1603\r\n", "information": [{"message_data": {"BackgroundColor": null, "ForegroundColor": null, "Message": "Exit code = 1603", "NoNewLine": false}, "source": "Write-Host", "tags": ["PSHOST"], "time_generated": "2026-07-27T07:06:29.1350643Z"}], "output": [], "result": {}, "verbose": [], "warning": []}
==> qemu.windows:

[personnumber3377]

Installing visual studio on the guest manually by running the command inside the guest in command prompt succeeds? That's weird. I also tried with powershell and it also succeeds when being ran manually. Something about the way the command is launched makes it fail.

[personnumber3377]

I got it to work. I had to replace the "--quiet" with "--passive" and now magically it works??

- name: Deploy
  hosts: default
  vars:
    vsix_installer: "{{ ansible_env['ProgramFiles'] }}\\Microsoft Visual Studio\\2022\\Community\\Common7\\IDE\\VSIXInstaller.exe"
    wdk_vsix_dir: "{{ ansible_env['ProgramFiles(x86)'] }}\\Windows Kits\\10\\Vsix\\VS2022\\10.0.26100.0\\amd64"
  tasks:
    # This should be set before running the win_inet_proxy module
    - name: Configure IE proxy settings to apply to all users
      ansible.windows.win_regedit:
        path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
        name: ProxySettingsPerUser
        data: 0
        type: dword
        state: present
      when: ansible_proxy | length > 0

    - name: Configure IE proxy settings
      win_inet_proxy:
        auto_detect: no
        proxy: "{{ ansible_proxy }}"
      when: ansible_proxy | length > 0

    # This should be done after setting the IE proxy with win_inet_proxy
    - name: Import IE proxy configuration to WinHTTP
      win_http_proxy:
        source: ie
      when: ansible_proxy | length > 0

    - name: Ensure Chocolatey installed from internal repo
      win_chocolatey:
        name: chocolatey
        proxy_url: "{{ ansible_proxy }}"

    - name: Set chocolatey proxy
      win_chocolatey_config:
        name: proxy
        state: present
        value: "{{ ansible_proxy }}"
      when: ansible_proxy | length > 0

    - name: Disable uncessary services
      win_service:
        name: "{{ item }}"
        state: stopped
        start_mode: disabled
      with_items:
        - WSearch
        - Spooler

    - name: Disable OneDrive
      win_regedit:
        path: HKLM:\Software\Policies\Microsoft\Windows\OneDrive
        name: DisableFileSyncNGSC
        data: 1
        type: dword
        state: present

    - name: Disable Cortana
      win_regedit:
        path: HKLM:\Software\Policies\Microsoft\Windows\Windows Search
        name: AllowCortana
        data: 0
        type: dword
        state: present

    - name: Disable Defender
      win_regedit:
        path: HKLM:\SOFTWARE\Policies\Microsoft\Microsoft Defender
        name: DisableAntiSpyware
        data: 1
        type: dword
        state: present

    - name: Reboot before installing Visual Studio
      ansible.windows.win_reboot:
        reboot_timeout: 1800
        post_reboot_delay: 30

    - name: Download Visual Studio 2022 Community installer
      win_get_url:
        url: https://aka.ms/vs/17/release/vs_Community.exe
        dest: C:\vs_community.exe

    - name: Show free disk space
      ansible.windows.win_powershell:
        script: |
          Get-CimInstance Win32_LogicalDisk |
            Where-Object DriveType -eq 3 |
            Select DeviceID,
                   @{Name="FreeGB";Expression={[math]::Round($_.FreeSpace/1GB,2)}},
                   @{Name="SizeGB";Expression={[math]::Round($_.Size/1GB,2)}} |
            Format-Table -AutoSize

    - name: Install Visual Studio
      block:
        - name: Install Native Desktop workload
          ansible.windows.win_powershell:
            script: |
              $ErrorActionPreference = "Stop"

              $args = @(
                "--installPath",
                "C:\Program Files\Microsoft Visual Studio\2022\Community",
                "--add",
                "Microsoft.VisualStudio.Workload.NativeDesktop",
                "--includeRecommended",
                "--addProductLang",
                "en-US",
                "--passive",
                "--wait",
                "--norestart"
              )

              $p = Start-Process `
                    -FilePath C:\vs_community.exe `
                    -ArgumentList $args `
                    -Wait `
                    -PassThru

              Write-Host "Exit code = $($p.ExitCode)"

              if ($p.ExitCode -notin @(0,3010,1641)) {
                  throw "Visual Studio failed with exit code $($p.ExitCode)"
              }

      rescue:
        - name: Collect VS installer logs
          ansible.windows.win_powershell:
            script: |
              New-Item C:\vslogs -ItemType Directory -Force | Out-Null

              Get-ChildItem `
                  C:\Users\*\AppData\Local\Temp `
                  -Recurse `
                  -Include dd_*.log `
                  -ErrorAction SilentlyContinue |
                  Copy-Item -Destination C:\vslogs -Force

              Compress-Archive `
                  -Path C:\vslogs\* `
                  -DestinationPath C:\vslogs.zip `
                  -Force

        - name: Download logs
          fetch:
            src: C:\vslogs.zip
            dest: ./failure-logs/
            flat: yes

        - fail:
            msg: Visual Studio installation failed. Installer logs downloaded.

    - name: Install VC Tools
      ansible.windows.win_powershell:
        script: |
          Start-Process `
            -FilePath C:\vs_community.exe `
            -ArgumentList @(
              "--quiet",
              "--wait",
              "--norestart",
              "--add",
              "Microsoft.VisualStudio.Component.VC.Tools.x86.x64"
            ) `
            -Wait

    - name: Install Windows 11 SDK
      ansible.windows.win_powershell:
        script: |
          Start-Process `
            -FilePath C:\vs_community.exe `
            -ArgumentList @(
              "--quiet",
              "--wait",
              "--norestart",
              "--add",
              "Microsoft.VisualStudio.Component.Windows11SDK.22621"
            ) `
            -Wait

    - name: Install Driver Kit component
      ansible.windows.win_powershell:
        script: |
          Start-Process `
            -FilePath C:\vs_community.exe `
            -ArgumentList @(
              "--quiet",
              "--wait",
              "--norestart",
              "--add",
              "Component.Microsoft.Windows.DriverKit"
            ) `
            -Wait

    - name: Download latest WDK for 10.0.22621.0
      win_get_url:
        url: https://go.microsoft.com/fwlink/?linkid=2196230
        dest: "{{ ansible_facts['env']['TEMP'] }}\\wdk_setup.exe"

    - name: Pause for debugging
      pause:
        seconds: 180

    - name: Install WDK
      win_command:
        cmd: wdk_setup.exe /q /norestart
      args:
        chdir: "{{ ansible_facts['env']['TEMP'] }}"

    - name: Enable Testsigning
      win_command: Bcdedit.exe -set TESTSIGNING ON

that setup file works fine.

[personnumber3377]

After a lot of debugging I am getting this:

Failed to prepare working directory. Exit.
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # kafl fuzz --purge

    __                        __  ___    ________
   / /_____  _________  ___  / / /   |  / ____/ /
  / //_/ _ \/ ___/ __ \/ _ \/ / / /| | / /_  / /
 / ,< /  __/ /  / / / /  __/ / / ___ |/ __/ / /___
/_/|_|\___/_/  /_/ /_/\___/_/ /_/  |_/_/   /_____/
===================================================

<< kAFL Fuzzer >>

Warning: Launching without --seed-dir?
No PT trace region defined.
00:00:00:     0 exec/s,    0 edges,  0% favs pending, findings: <0, 0, 0>
Worker-00 Launching virtual machine...
/root/research/kAFL/kafl/qemu/x86_64-softmmu/qemu-system-x86_64
	-enable-kvm
	-machine kAFL64-v1
	-cpu kAFL64-Hypervisor-v1,+vmx
	-no-reboot
	-net none
	-display none
	-chardev socket,server,id=nyx_socket,path=/dev/shm/kafl_root/interface_0
	-device nyx,chardev=nyx_socket,workdir=/dev/shm/kafl_root,worker_id=0,bitmap_size=65536,input_buffer_size=131072
	-device isa-serial,chardev=kafl_serial
	-chardev file,id=kafl_serial,mux=on,path=/dev/shm/kafl_root/serial_00.log
	-m 4096
	-drive file=/root/.local/share/libvirt/images/windows_x86_64_vagrant-kafl-windows.img
	-monitor unix:/tmp/monitor.sock,server,nowait
	-fast_vm_reload path=/dev/shm/kafl_root/snapshot/,load=off
[QEMU-NYX] Max Dirty Ring Size -> 1048576 (Entries: 65536)
qemu-system-x86_64: warning: host doesn't support requested feature: CPUID.07H:EBX.hle [bit 4]
qemu-system-x86_64: warning: host doesn't support requested feature: CPUID.07H:EBX.rtm [bit 11]
[QEMU-NYX] Dirty ring mmap region located at 0x78018c780000
[QEMU-NYX] Warning: Invalid sharedir...
[QEMU-NYX] Booting VM to start fuzzing...

^CReceived Ctrl-C, killing workers...
Waiting for Workers to shutdown...
Worker-00 Shutting down Qemu after 0 execs..
qemu-system-x86_64: terminating on signal 15 from pid 284798 (/root/research/kAFL/kafl/.venv/bin/python3)

and the machine hangs at the startup step for forever???

Here is some debugging:

libvirt-exec.trace.2048
libvirt-exec.trace.2049
libvirt-exec.trace.283467
libvirt-exec.trace.283468
libvirt-exec.trace.283469
libvirt-exec.trace.283470
libvirt-exec.trace.283496
libvirt-exec.trace.283497
libvirt-exec.trace.283498
libvirt-exec.trace.283499
libvirt-exec.trace.283500
libvirt-exec.trace.283501
libvirt-exec.trace.283502
libvirt-exec.trace.283503
libvirt-exec.trace.283504
libvirt-exec.trace.283505
libvirt-exec.trace.283506
libvirt-exec.trace.283507
libvirt-exec.trace.283508
libvirt-exec.trace.283509
libvirt-exec.trace.283516
libvirt-exec.trace.283517
libvirt-exec.trace.283518
libvirt-exec.trace.283522
libvirt-exec.trace.283531
libvirt-exec.trace.283532
libvirt-exec.trace.283533
libvirt-exec.trace.283534
libvirt-exec.trace.283535
libvirt-exec.trace.283542
libvirt-exec.trace.283543
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # grep -R 'execve("/usr/bin/qemu-system-x86_64"' /tmp/libvirt-exec.trace*^C
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # cat /tmp/libvirt-exec.trace.* | grep qemu
execve("/usr/bin/qemu-img", ["/usr/bin/qemu-img", "create", "-f", "qcow2", "-b", "/root/.local/share/libvirt/images/kafl_windows_vagrant_box_image_0_1785179894_box_0.img", "-o", "backing_fmt=qcow2,compat=1.1", "/root/.local/share/libvirt/images/windows_x86_64_vagrant-kafl-windows.img", "67108864K"], ["LANG=en_US.UTF-8", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/snap/bin", "LISTEN_FDNAMES=libvirtd.socket:libvirtd-admin.socket:libvirtd-ro.socket", "USER=root", "INVOCATION_ID=b3f3828d155e434bb1f7b7cbe081afbf", "JOURNAL_STREAM=8:21650", "SYSTEMD_EXEC_PID=1918", "MEMORY_PRESSURE_WATCH=/sys/fs/cgroup/system.slice/libvirtd.service/memory.pressure", "MEMORY_PRESSURE_WRITE=c29tZSAyMDAwMDAgMjAwMDAwMAA=", "NOTIFY_SOCKET=/run/systemd/notify", "LIBVIRTD_ARGS=--timeout 120"]) = 0
execve("/usr/lib/libvirt/virt-aa-helper", ["/usr/lib/libvirt/virt-aa-helper", "-r", "-u", "libvirt-304a653c-cc44-481f-97b2-c2a4ab9a2316", "-F", "/var/lib/libvirt/qemu/domain-12-windows_x86_64_vagra/{,**}"], ["LIBVIRT_LOG_OUTPUTS=3:stderr"]) = 0
execve("/usr/lib/libvirt/virt-aa-helper", ["/usr/lib/libvirt/virt-aa-helper", "-r", "-u", "libvirt-304a653c-cc44-481f-97b2-c2a4ab9a2316", "-F", "/run/libvirt/qemu/channel/12-windows_x86_64_vagra/{,**}"], ["LIBVIRT_LOG_OUTPUTS=3:stderr"]) = 0
execve("/usr/lib/libvirt/virt-aa-helper", ["/usr/lib/libvirt/virt-aa-helper", "-r", "-u", "libvirt-304a653c-cc44-481f-97b2-c2a4ab9a2316", "-F", "/var/lib/libvirt/qemu/domain-12-windows_x86_64_vagra/master-key.aes"], ["LIBVIRT_LOG_OUTPUTS=3:stderr"]) = 0
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # sudoedit /etc/libvirt/qemu.conf
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # systemctl restart libvirtd
Warning: The unit file, source configuration file or drop-ins of libvirtd.service changed on disk. Run 'systemctl daemon-reload' to reload units.
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # systemctl daemon-reload
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # systemctl restart libvirtd
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # grep -n '^[[:space:]]*security_driver' /etc/libvirt/qemu.conf
326:security_driver = "none"
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # rm -rf .vagrant
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # 
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # virsh --connect qemu:///session vol-delete \
>   windows_x86_64_vagrant-kafl-windows.img \
>   --pool default 2>/dev/null || true

(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # make init
vagrant up --no-provision
Bringing machine 'vagrant-kafl-windows' up with 'libvirt' provider...
==> vagrant-kafl-windows: Running action triggers before up ...
==> vagrant-kafl-windows: Running trigger...
==> vagrant-kafl-windows: Unset HTTP_PROXY
[fog][WARNING] Unrecognized arguments: libvirt_ip_command
==> vagrant-kafl-windows: No version detected for kafl_windows, using timestamp to watch for modifications. Consider
==> vagrant-kafl-windows: generating a local metadata for the box with a version to allow better handling.
==> vagrant-kafl-windows: See https://www.vagrantup.com/docs/boxes/format#box-metadata for further details.
==> vagrant-kafl-windows: Creating image (snapshot of base box volume).
==> vagrant-kafl-windows: Creating domain with the following settings...
==> vagrant-kafl-windows:  -- Name:              windows_x86_64_vagrant-kafl-windows
==> vagrant-kafl-windows:  -- Description:       Source: /root/research/kAFL/kafl/examples/windows_x86_64/Vagrantfile
==> vagrant-kafl-windows:  -- Domain type:       kvm
==> vagrant-kafl-windows:  -- Cpus:              4
==> vagrant-kafl-windows:  -- CPU topology:      sockets=1, cores=4, threads=1
==> vagrant-kafl-windows:  -- Feature:           acpi
==> vagrant-kafl-windows:  -- Feature:           apic
==> vagrant-kafl-windows:  -- Feature:           pae
==> vagrant-kafl-windows:  -- Clock offset:      utc
==> vagrant-kafl-windows:  -- Memory:            4096M
==> vagrant-kafl-windows:  -- Base box:          kafl_windows
==> vagrant-kafl-windows:  -- Storage pool:      default
==> vagrant-kafl-windows:  -- Image(vda):        /root/.local/share/libvirt/images/windows_x86_64_vagrant-kafl-windows.img, ide, 64G
==> vagrant-kafl-windows:  -- Disk driver opts:  cache='default'
==> vagrant-kafl-windows:  -- Graphics Type:     vnc
==> vagrant-kafl-windows:  -- Video Type:        cirrus
==> vagrant-kafl-windows:  -- Video VRAM:        16384
==> vagrant-kafl-windows:  -- Video 3D accel:    false
==> vagrant-kafl-windows:  -- Keymap:            en-us
==> vagrant-kafl-windows:  -- TPM Backend:       passthrough
==> vagrant-kafl-windows:  -- INPUT:             type=mouse, bus=ps2
==> vagrant-kafl-windows: Creating shared folders metadata...
==> vagrant-kafl-windows: Updating domain definition due to configuration change
==> vagrant-kafl-windows: Starting domain.
==> vagrant-kafl-windows: Domain launching with graphics connection settings...
==> vagrant-kafl-windows:  -- Graphics Port:      5900
==> vagrant-kafl-windows:  -- Graphics IP:        127.0.0.1
==> vagrant-kafl-windows:  -- Graphics Password:  Not defined
==> vagrant-kafl-windows:  -- Graphics Websocket: 5700
==> vagrant-kafl-windows: Waiting for domain to get an IP address...
==> vagrant-kafl-windows: Waiting for machine to boot. This may take a few minutes...
    vagrant-kafl-windows: WinRM address: 192.168.122.96:5985
    vagrant-kafl-windows: WinRM username: vagrant
    vagrant-kafl-windows: WinRM execution_time_limit: PT2H
    vagrant-kafl-windows: WinRM transport: negotiate
==> vagrant-kafl-windows: Machine booted and ready!
==> vagrant-kafl-windows: Forwarding ports...
==> vagrant-kafl-windows: 5985 (guest) => 55985 (host) (adapter eth0)
==> vagrant-kafl-windows: 5986 (guest) => 55986 (host) (adapter eth0)
==> vagrant-kafl-windows: Machine not provisioned because `--no-provision` is specified.
vagrant snapshot save 'ready_provision'
[fog][WARNING] Unrecognized arguments: libvirt_ip_command
==> vagrant-kafl-windows: Snapshotting the machine as 'ready_provision'...
==> vagrant-kafl-windows: Snapshot saved! You can restore the snapshot at any time by
==> vagrant-kafl-windows: using `vagrant snapshot restore`. You can delete it using
==> vagrant-kafl-windows: `vagrant snapshot delete`.
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # grep -n '^[[:space:]]*security_driver' /etc/libvirt/qemu.conf
326:security_driver = "none"
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 #   cat Vagrantfile 
# set target to compile and setup in the guest
# choices: ['userspace', 'driver']
# default: userspace
TARGET = ENV['TARGET_HARNESS'] || 'userspace'

Vagrant.configure("2") do |config|
    # The Packer box we just added
    config.vm.box = "kafl_windows"
    # our box name in libvirt
    config.vm.define "vagrant-kafl-windows"

    # rsync doesn't work on WinRM
    config.vm.synced_folder ".", "/vagrant", disabled: true

    # Vagrant WinRM lib uses HTTP_PROXY even if destination is on local network
    config.trigger.before :up do |trigger|
        trigger.info = "Unset HTTP_PROXY"
        ENV['HTTP_PROXY'] = nil
        ENV['HTTPS_PROXY'] = nil
        ENV['http_proxy'] = nil
        ENV['https_proxy'] = nil
    end

    config.vm.provider :libvirt do |libvirt|
        # the qcow will be owned by the user
        # so kafl can use the VM's qcow as well
        libvirt.uri = "qemu:///session"
        # spice is better than VNC (mouse handling)
        # libvirt.graphics_type = "spice"
        libvirt.cpus = 4
        libvirt.cputopology :sockets => '1', :cores => '4', :threads => '1'
        libvirt.memory = 4096
        # Debugging for the QEMU crash...
        libvirt.cpu_mode = "host-passthrough"
        libvirt.graphics_type = "vnc"
    end

    # workaround https://github.com/hashicorp/vagrant/issues/13193
    config.trigger.after :provision do |trigger|
        trigger.info = "Provisioning"
        trigger.run = {inline: "bash -c 'source ../venv/bin/activate && ./setup_target.sh -e target_harness=#{TARGET}'"}
    end
end
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # make 
ansible              compile              init                 provision_driver     provision_userspace  
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # make provision_userspace 
mkdir -p bin/{userspace,driver}
x86_64-w64-mingw32-gcc src/userspace/selffuzz_test.c -I ../ -o bin/userspace/selffuzz_test.exe -Wall -mwindows 
x86_64-w64-mingw32-gcc src/driver/vuln_test.c -I ../ -o bin/driver/vuln_test.exe -Wall -lntdll -lpsapi
vagrant snapshot restore 'ready_provision'
[fog][WARNING] Unrecognized arguments: libvirt_ip_command
==> vagrant-kafl-windows: Restoring the snapshot 'ready_provision'...
TARGET_HARNESS='userspace' vagrant provision
[fog][WARNING] Unrecognized arguments: libvirt_ip_command
==> vagrant-kafl-windows: Running action triggers after provision ...
==> vagrant-kafl-windows: Running trigger...
==> vagrant-kafl-windows: Provisioning
    vagrant-kafl-windows: Running local: Inline script
    vagrant-kafl-windows: bash -c 'source ../venv/bin/activate && ./setup_target.sh -e target_harness=userspace'
    vagrant-kafl-windows: [fog][WARNING] Unrecognized arguments: libvirt_ip_command
    vagrant-kafl-windows: 
    vagrant-kafl-windows: 
    vagrant-kafl-windows: PLAY [Setup target] ************************************************************
    vagrant-kafl-windows: 
    vagrant-kafl-windows: TASK [Gathering Facts] *********************************************************
    vagrant-kafl-windows: 
    vagrant-kafl-windows: ok: [192.168.122.96]
    vagrant-kafl-windows: 
    vagrant-kafl-windows: TASK [Set default value for target_harness] ************************************
    vagrant-kafl-windows: 
    vagrant-kafl-windows: skipping: [192.168.122.96]
    vagrant-kafl-windows: 
    vagrant-kafl-windows: TASK [Upload binaries] *********************************************************
    vagrant-kafl-windows: 
    vagrant-kafl-windows: changed: [192.168.122.96]
    vagrant-kafl-windows: 
    vagrant-kafl-windows: TASK [Setup userspace target to run at user login] *****************************
    vagrant-kafl-windows: 
    vagrant-kafl-windows: changed: [192.168.122.96]
    vagrant-kafl-windows: 
    vagrant-kafl-windows: TASK [Upload vuln driver sources] **********************************************
    vagrant-kafl-windows: 
    vagrant-kafl-windows: skipping: [192.168.122.96]
    vagrant-kafl-windows: 
    vagrant-kafl-windows: TASK [Compile driver with MSBuild] *********************************************
    vagrant-kafl-windows: 
    vagrant-kafl-windows: skipping: [192.168.122.96]
    vagrant-kafl-windows: 
    vagrant-kafl-windows: TASK [Set service to start vuln_driver.sys at boot] ****************************
    vagrant-kafl-windows: 
    vagrant-kafl-windows: skipping: [192.168.122.96]
    vagrant-kafl-windows: 
    vagrant-kafl-windows: TASK [Set service to start vuln_test to trigger the driver] ********************
    vagrant-kafl-windows: 
    vagrant-kafl-windows: skipping: [192.168.122.96]
    vagrant-kafl-windows: 
    vagrant-kafl-windows: PLAY RECAP *********************************************************************
    vagrant-kafl-windows: 192.168.122.96             : ok=3    changed=2    unreachable=0    failed=0    skipped=5    rescued=0    ignored=0   
    vagrant-kafl-windows: 
    vagrant-kafl-windows: 
vagrant halt
[fog][WARNING] Unrecognized arguments: libvirt_ip_command
==> vagrant-kafl-windows: Clearing any previously set forwarded ports...
==> vagrant-kafl-windows: Attempting graceful shutdown of VM...
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # k^C
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # which kafl
/root/research/kAFL/kafl/.venv/bin/kafl
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # kafl fuzz
Traceback (most recent call last):
  File "/root/research/kAFL/kafl/.venv/bin/kafl", line 8, in <module>
    sys.exit(main())
             ~~~~^^
  File "/root/research/kAFL/kafl/fuzzer/kafl_fuzzer/__main__.py", line 30, in main
    validate()
    ~~~~~~~~^^
  File "/root/research/kAFL/kafl/fuzzer/kafl_fuzzer/common/config/settings.py", line 195, in validate
    settings.validators.validate()
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^
  File "/root/research/kAFL/kafl/.venv/lib/python3.14/site-packages/dynaconf/validator.py", line 492, in validate
    validator.validate(
    ~~~~~~~~~~~~~~~~~~^
        self.settings,
        ^^^^^^^^^^^^^^
    ...<2 lines>...
        only_current_env=only_current_env,
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    )
    ^
  File "/root/research/kAFL/kafl/.venv/lib/python3.14/site-packages/dynaconf/validator.py", line 216, in validate
    self._validate_items(
    ~~~~~~~~~~~~~~~~~~~~^
        settings, settings.current_env, only=only, exclude=exclude
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    )
    ^
  File "/root/research/kAFL/kafl/.venv/lib/python3.14/site-packages/dynaconf/validator.py", line 294, in _validate_items
    value = self.cast(settings.get(name))
  File "/root/research/kAFL/kafl/fuzzer/kafl_fuzzer/common/config/settings.py", line 93, in cast_expand_path
    raise FileNotFoundError(f"Path {p} doesn't exist")
FileNotFoundError: Path $RADAMSA_ROOT/bin/radamsa doesn't exist
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # env | grep RADA
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # 
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # ls
Makefile  README.md  Vagrantfile  ansible.cfg  bin  kafl.yaml  setup_target.sh  setup_target.yml  src  stuff.sh  test.xml
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # cd ^C
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # cd bin/
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64/bin # ls
driver  userspace
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64/bin # cd ..
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # cd ..
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples # cd ..
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # find . | grep radamsa
./radamsa
./radamsa/bin
./radamsa/bin/ol
./radamsa/bin/uniqtest.sh
./radamsa/bin/radamsa
./radamsa/bin/tournament.sh
./radamsa/bin/release.sh
./radamsa/.git
./radamsa/.git/hooks
./radamsa/.git/hooks/sendemail-validate.sample
./radamsa/.git/hooks/pre-push.sample
./radamsa/.git/hooks/pre-commit.sample
./radamsa/.git/hooks/pre-applypatch.sample
./radamsa/.git/hooks/fsmonitor-watchman.sample
./radamsa/.git/hooks/pre-merge-commit.sample
./radamsa/.git/hooks/push-to-checkout.sample
./radamsa/.git/hooks/post-update.sample
./radamsa/.git/hooks/pre-receive.sample
./radamsa/.git/hooks/pre-rebase.sample
./radamsa/.git/hooks/prepare-commit-msg.sample
./radamsa/.git/hooks/applypatch-msg.sample
./radamsa/.git/hooks/commit-msg.sample
./radamsa/.git/hooks/update.sample
./radamsa/.git/ORIG_HEAD
./radamsa/.git/index
./radamsa/.git/objects
./radamsa/.git/objects/pack
./radamsa/.git/objects/pack/pack-30e693fab32f2b1c48218b4a24cabad7574b595a.rev
./radamsa/.git/objects/pack/pack-30e693fab32f2b1c48218b4a24cabad7574b595a.idx
./radamsa/.git/objects/pack/pack-30e693fab32f2b1c48218b4a24cabad7574b595a.pack
./radamsa/.git/objects/info
./radamsa/.git/refs
./radamsa/.git/refs/heads
./radamsa/.git/refs/heads/develop
./radamsa/.git/refs/remotes
./radamsa/.git/refs/remotes/origin
./radamsa/.git/refs/remotes/origin/HEAD
./radamsa/.git/refs/tags
./radamsa/.git/logs
./radamsa/.git/logs/refs
./radamsa/.git/logs/refs/heads
./radamsa/.git/logs/refs/heads/develop
./radamsa/.git/logs/refs/remotes
./radamsa/.git/logs/refs/remotes/origin
./radamsa/.git/logs/refs/remotes/origin/HEAD
./radamsa/.git/logs/HEAD
./radamsa/.git/HEAD
./radamsa/.git/info
./radamsa/.git/info/exclude
./radamsa/.git/packed-refs
./radamsa/.git/description
./radamsa/.git/config
./radamsa/lib
./radamsa/lib/hex
./radamsa/lib/hex/.git
./radamsa/lib/hex/.git/hooks
./radamsa/lib/hex/.git/hooks/sendemail-validate.sample
./radamsa/lib/hex/.git/hooks/pre-push.sample
./radamsa/lib/hex/.git/hooks/pre-commit.sample
./radamsa/lib/hex/.git/hooks/pre-applypatch.sample
./radamsa/lib/hex/.git/hooks/fsmonitor-watchman.sample
./radamsa/lib/hex/.git/hooks/pre-merge-commit.sample
./radamsa/lib/hex/.git/hooks/push-to-checkout.sample
./radamsa/lib/hex/.git/hooks/post-update.sample
./radamsa/lib/hex/.git/hooks/pre-receive.sample
./radamsa/lib/hex/.git/hooks/pre-rebase.sample
./radamsa/lib/hex/.git/hooks/prepare-commit-msg.sample
./radamsa/lib/hex/.git/hooks/applypatch-msg.sample
./radamsa/lib/hex/.git/hooks/commit-msg.sample
./radamsa/lib/hex/.git/hooks/update.sample
./radamsa/lib/hex/.git/index
./radamsa/lib/hex/.git/objects
./radamsa/lib/hex/.git/objects/pack
./radamsa/lib/hex/.git/objects/pack/pack-a71ee63b2d5aad84696b1c00ff797503432be833.rev
./radamsa/lib/hex/.git/objects/pack/pack-a71ee63b2d5aad84696b1c00ff797503432be833.pack
./radamsa/lib/hex/.git/objects/pack/pack-a71ee63b2d5aad84696b1c00ff797503432be833.idx
./radamsa/lib/hex/.git/objects/info
./radamsa/lib/hex/.git/refs
./radamsa/lib/hex/.git/refs/heads
./radamsa/lib/hex/.git/refs/heads/master
./radamsa/lib/hex/.git/refs/remotes
./radamsa/lib/hex/.git/refs/remotes/origin
./radamsa/lib/hex/.git/refs/remotes/origin/HEAD
./radamsa/lib/hex/.git/refs/tags
./radamsa/lib/hex/.git/logs
./radamsa/lib/hex/.git/logs/refs
./radamsa/lib/hex/.git/logs/refs/heads
./radamsa/lib/hex/.git/logs/refs/heads/master
./radamsa/lib/hex/.git/logs/refs/remotes
./radamsa/lib/hex/.git/logs/refs/remotes/origin
./radamsa/lib/hex/.git/logs/refs/remotes/origin/HEAD
./radamsa/lib/hex/.git/logs/HEAD
./radamsa/lib/hex/.git/HEAD
./radamsa/lib/hex/.git/info
./radamsa/lib/hex/.git/info/exclude
./radamsa/lib/hex/.git/packed-refs
./radamsa/lib/hex/.git/description
./radamsa/lib/hex/.git/config
./radamsa/lib/hex/lib
./radamsa/lib/hex/.gitlab-ci.yml
./radamsa/lib/hex/core.scm
./radamsa/lib/hex/README.md
./radamsa/lib/hex/Makefile
./radamsa/lib/hex/.gitignore
./radamsa/lib/hex/main.scm
./radamsa/.gitlab-ci.yml
./radamsa/README.md
./radamsa/c
./radamsa/c/radamsa.h
./radamsa/c/lib.c
./radamsa/c/libradamsa-test.c
./radamsa/Makefile
./radamsa/ol.c.gz
./radamsa/.gitignore
./radamsa/tests
./radamsa/tests/sr.sh
./radamsa/tests/tr2.sh
./radamsa/tests/ts1.sh
./radamsa/tests/ld.sh
./radamsa/tests/ts2.sh
./radamsa/tests/xpp.sh
./radamsa/tests/tcp-client.sh_
./radamsa/tests/seek.sh
./radamsa/tests/tcp-serve.sh_
./radamsa/tests/1k.sh
./radamsa/tests/fail.sh
./radamsa/tests/meta.sh
./radamsa/tests/xpd.sh
./radamsa/tests/num.sh
./radamsa/tests/lr2.sh
./radamsa/tests/ls.sh
./radamsa/tests/benchmark
./radamsa/tests/bd.sh
./radamsa/tests/xps.sh
./radamsa/tests/uniq.sh
./radamsa/tests/udp.sh
./radamsa/tests/stdin-file.sh
./radamsa/tests/xpi.sh
./radamsa/tests/blank.sh_
./radamsa/tests/ab.sh
./radamsa/tests/ft.sh
./radamsa/tests/template.sh
./radamsa/tests/nop.sh
./radamsa/tests/xpn.sh
./radamsa/tests/run
./radamsa/tests/sha256-path.sh
./radamsa/tests/tr.sh
./radamsa/tests/sha256.sh
./radamsa/tests/li.sh
./radamsa/tests/pcapng
./radamsa/tests/pcapng/pcapng_identity_test.sh
./radamsa/tests/pcapng/pcapng_well_formedness_test.sh
./radamsa/LICENCE
./radamsa/rad
./radamsa/rad/generic.scm
./radamsa/rad/output.scm
./radamsa/rad/fuse.scm
./radamsa/rad/libradamsa.scm
./radamsa/rad/mutations.scm
./radamsa/rad/patterns.scm
./radamsa/rad/xp.scm
./radamsa/rad/shared.scm
./radamsa/rad/digest.scm
./radamsa/rad/split.scm
./radamsa/rad/main.scm
./radamsa/rad/pcapng.scm
./radamsa/rad/generators.scm
./radamsa/radamsa.c
./radamsa/NEWS
./radamsa/ol.c
./radamsa/doc
./radamsa/doc/radamsa.1
./fuzzer/kafl_fuzzer/technique/radamsa.py
./fuzzer/kafl_fuzzer/technique/__pycache__/radamsa.cpython-314.pyc
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # ^C
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # cd radamsa/
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/radamsa # export RADAMSA_ROOT=$PWD
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/radamsa # cd ..
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # cd ^C
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # cd examples/windows_x86_64
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # kafl fuzz
Traceback (most recent call last):
  File "/root/research/kAFL/kafl/.venv/bin/kafl", line 8, in <module>
    sys.exit(main())
             ~~~~^^
  File "/root/research/kAFL/kafl/fuzzer/kafl_fuzzer/__main__.py", line 30, in main
    validate()
    ~~~~~~~~^^
  File "/root/research/kAFL/kafl/fuzzer/kafl_fuzzer/common/config/settings.py", line 195, in validate
    settings.validators.validate()
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^
  File "/root/research/kAFL/kafl/.venv/lib/python3.14/site-packages/dynaconf/validator.py", line 492, in validate
    validator.validate(
    ~~~~~~~~~~~~~~~~~~^
        self.settings,
        ^^^^^^^^^^^^^^
    ...<2 lines>...
        only_current_env=only_current_env,
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    )
    ^
  File "/root/research/kAFL/kafl/.venv/lib/python3.14/site-packages/dynaconf/validator.py", line 216, in validate
    self._validate_items(
    ~~~~~~~~~~~~~~~~~~~~^
        settings, settings.current_env, only=only, exclude=exclude
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    )
    ^
  File "/root/research/kAFL/kafl/.venv/lib/python3.14/site-packages/dynaconf/validator.py", line 294, in _validate_items
    value = self.cast(settings.get(name))
  File "/root/research/kAFL/kafl/fuzzer/kafl_fuzzer/common/config/settings.py", line 93, in cast_expand_path
    raise FileNotFoundError(f"Path {p} doesn't exist")
FileNotFoundError: Path $QEMU_ROOT/x86_64-softmmu/qemu-system-x86_64 doesn't exist
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # cd ..
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples # cd ..
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # cd qemu/
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/qemu # ls^C
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/qemu # export QEMU_ROOT=$PWD
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/qemu # ls
CODING_STYLE.rst  blockjob.c               cpus.c                ioport.c           os-posix.o            qemu-keymap.o           stubs
COPYING           blockjob.d               crypto                iothread.c         os-win32.c            qemu-nbd.c              target
COPYING.LIB       blockjob.o               default-configs       iothread.d         pc-bios               qemu-nbd.texi           tcg
Changelog         bootdevice.c             device-hotplug.c      iothread.o         plugins               qemu-option-trace.texi  tests
Kconfig.host      bootdevice.d             device-hotplug.d      job-qmp.c          po                    qemu-options-wrapper.h  thunk.c
LICENSE           bootdevice.o             device-hotplug.o      job-qmp.d          python                qemu-options.def        tpm.c
MAINTAINERS       bsd-user                 device_tree.c         job-qmp.o          qapi                  qemu-options.h          tpm.d
Makefile          bt-host.c                device_tree.d         job.c              qapi-gen-timestamp    qemu-options.hx         tpm.o
Makefile.objs     bt-host.d                device_tree.o         job.d              qdev-monitor.c        qemu-seccomp.c          trace
Makefile.target   bt-host.o                disas                 job.o              qdev-monitor.d        qemu-seccomp.d          trace-events
README.md         bt-vhci.c                disas.c               libdecnumber       qdev-monitor.o        qemu-seccomp.o          trace-events-all
README.rst        bt-vhci.d                dma-helpers.c         libqemuutil.a      qemu-bridge-helper    qemu-tech.texi          trace-root.c
VERSION           bt-vhci.o                dma-helpers.d         libvhost-user.a    qemu-bridge-helper.c  qemu-version.h          trace-root.c-timestamp
accel             capstone                 dma-helpers.o         libxdc             qemu-bridge-helper.d  qemu.nsi                trace-root.d
arch_init.c       capstone_v4              docs                  linux-headers      qemu-bridge-helper.o  qemu.sasl               trace-root.h
audio             chardev                  dtc                   linux-user         qemu-deprecated.texi  qga                     trace-root.h-timestamp
authz             compile_qemu_nyx.sh      dump                  logo.png           qemu-doc.texi         qobject                 trace-root.o
backends          config-all-devices.mak   exec-vary.c           memory.c           qemu-edid.c           qom                     ui
balloon.c         config-all-disas.mak     exec.c                memory_ldst.inc.c  qemu-ga               qtest.c                 util
block             config-host.h            fpu                   memory_mapping.c   qemu-img-cmds.hx      replay                  version.rc
block.c           config-host.h-timestamp  fsdev                 migration          qemu-img.c            replication.c           vhost-user-input
block.d           config-host.mak          gdb-xml               module-common.c    qemu-img.texi         replication.d           vl.c
block.o           config.log               gdbstub.c             module_block.h     qemu-io-cmds.c        replication.h           vl.d
blockdev-nbd.c    config.status            gitdm.config          monitor            qemu-io-cmds.d        replication.o           vl.o
blockdev-nbd.d    configure                hmp-commands-info.hx  nbd                qemu-io-cmds.o        roms                    x86_64-softmmu
blockdev-nbd.o    contrib                  hmp-commands.hx       net                qemu-io.c             rules.mak
blockdev.c        cpus-common.c            hw                    nyx                qemu-keymap           scripts
blockdev.d        cpus-common.d            include               os-posix.c         qemu-keymap.c         scsi
blockdev.o        cpus-common.o            io                    os-posix.d         qemu-keymap.d         slirp
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/qemu # ls x86_64-softmmu/^C
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/qemu # cd ..
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # cd examples/windows_x86_64/
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # kafl fuzz
Traceback (most recent call last):
  File "/root/research/kAFL/kafl/.venv/bin/kafl", line 8, in <module>
    sys.exit(main())
             ~~~~^^
  File "/root/research/kAFL/kafl/fuzzer/kafl_fuzzer/__main__.py", line 30, in main
    validate()
    ~~~~~~~~^^
  File "/root/research/kAFL/kafl/fuzzer/kafl_fuzzer/common/config/settings.py", line 195, in validate
    settings.validators.validate()
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^
  File "/root/research/kAFL/kafl/.venv/lib/python3.14/site-packages/dynaconf/validator.py", line 492, in validate
    validator.validate(
    ~~~~~~~~~~~~~~~~~~^
        self.settings,
        ^^^^^^^^^^^^^^
    ...<2 lines>...
        only_current_env=only_current_env,
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    )
    ^
  File "/root/research/kAFL/kafl/.venv/lib/python3.14/site-packages/dynaconf/validator.py", line 216, in validate
    self._validate_items(
    ~~~~~~~~~~~~~~~~~~~~^
        settings, settings.current_env, only=only, exclude=exclude
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    )
    ^
  File "/root/research/kAFL/kafl/.venv/lib/python3.14/site-packages/dynaconf/validator.py", line 294, in _validate_items
    value = self.cast(settings.get(name))
  File "/root/research/kAFL/kafl/fuzzer/kafl_fuzzer/common/config/settings.py", line 93, in cast_expand_path
    raise FileNotFoundError(f"Path {p} doesn't exist")
FileNotFoundError: Path $LIBXDC_ROOT/build/ptdump_static doesn't exist
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # cd ..
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples # cd ..
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # cd libxdc/
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/libxdc # export LIBXDC_ROOT=$PWD
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/libxdc # cd ..
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # cd examples/windows_x86_64/
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # kafl fuzz

    __                        __  ___    ________
   / /_____  _________  ___  / / /   |  / ____/ /
  / //_/ _ \/ ___/ __ \/ _ \/ / / /| | / /_  / /
 / ,< /  __/ /  / / / /  __/ / / ___ |/ __/ / /___
/_/|_|\___/_/  /_/ /_/\___/_/ /_/  |_/_/   /_____/
===================================================

<< kAFL Fuzzer >>

Warning: Launching without --seed-dir?
No PT trace region defined.
00:00:00:     0 exec/s,    0 edges,  0% favs pending, findings: <0, 0, 0>
Traceback (most recent call last):
  File "/root/research/kAFL/kafl/.venv/bin/kafl", line 8, in <module>
    sys.exit(main())
             ~~~~^^
  File "/root/research/kAFL/kafl/fuzzer/kafl_fuzzer/__main__.py", line 34, in main
    args.func(settings)
    ~~~~~~~~~^^^^^^^^^^
  File "/root/research/kAFL/kafl/fuzzer/kafl_fuzzer/manager/core.py", line 105, in start
    workers[i].start()
    ~~~~~~~~~~~~~~~~^^
  File "/usr/lib/python3.14/multiprocessing/process.py", line 121, in start
    self._popen = self._Popen(self)
                  ~~~~~~~~~~~^^^^^^
  File "/usr/lib/python3.14/multiprocessing/context.py", line 230, in _Popen
    return _default_context.get_context().Process._Popen(process_obj)
           ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^
  File "/usr/lib/python3.14/multiprocessing/context.py", line 306, in _Popen
    return Popen(process_obj)
  File "/usr/lib/python3.14/multiprocessing/popen_forkserver.py", line 35, in __init__
    super().__init__(process_obj)
    ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^
  File "/usr/lib/python3.14/multiprocessing/popen_fork.py", line 20, in __init__
    self._launch(process_obj)
    ~~~~~~~~~~~~^^^^^^^^^^^^^
  File "/usr/lib/python3.14/multiprocessing/popen_forkserver.py", line 47, in _launch
    reduction.dump(process_obj, buf)
    ~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.14/multiprocessing/reduction.py", line 60, in dump
    ForkingPickler(file, protocol).dump(obj)
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^
_pickle.PicklingError: Can't pickle local object <function _create_environ_mapping.<locals>.encode at 0x77b5b9380720>
when serializing dict item 'encodekey'
when serializing os._Environ state
when serializing os._Environ object
when serializing dict item 'environ'
when serializing dynaconf.base.Settings state
when serializing dynaconf.base.Settings object
when serializing tuple item 0
when serializing dynaconf.base.LazySettings reconstructor arguments
when serializing dynaconf.base.LazySettings object
when serializing tuple item 1
when serializing dict item '_args'
when serializing multiprocessing.context.Process state
when serializing multiprocessing.context.Process object
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # cat pyproject.toml | grep -A5 "requires-python"
cat: pyproject.toml: No such file or directory
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # grep -R "python" pyproject.toml setup.cfg setup.py
grep: pyproject.toml: No such file or directory
grep: setup.cfg: No such file or directory
grep: setup.py: No such file or directory
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # 
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # ls
Makefile  README.md  Vagrantfile  ansible.cfg  bin  kafl.yaml  setup_target.sh  setup_target.yml  src  stuff.sh  test.xml
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # ^C
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # ^C
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # cd ..
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples # cd ..
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # cd ..
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL # grep -R "python" pyproject.toml setup.cfg setup.py
grep: pyproject.toml: No such file or directory
grep: setup.cfg: No such file or directory
grep: setup.py: No such file or directory
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL # cat pyproject.toml | grep -A5 "requires-python"
cat: pyproject.toml: No such file or directory
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL # cd kafl/
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # cat pyproject.toml | grep -A5 "requires-python"
cat: pyproject.toml: No such file or directory
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # grep -R "python" pyproject.toml setup.cfg setup.py
grep: pyproject.toml: No such file or directory
grep: setup.cfg: No such file or directory
grep: setup.py: No such file or directory
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl #   find . | grep pyproject.
./examples/venv/lib/python3.14/site-packages/ansible_collections/cisco/asa/pyproject.toml
./examples/venv/lib/python3.14/site-packages/ansible_collections/cisco/nxos/pyproject.toml
./examples/venv/lib/python3.14/site-packages/ansible_collections/cisco/ios/pyproject.toml
./examples/venv/lib/python3.14/site-packages/ansible_collections/cisco/iosxr/pyproject.toml
./examples/venv/lib/python3.14/site-packages/ansible_collections/ibm/qradar/pyproject.toml
./examples/venv/lib/python3.14/site-packages/ansible_collections/junipernetworks/junos/pyproject.toml
./examples/venv/lib/python3.14/site-packages/ansible_collections/netbox/netbox/pyproject.toml
./examples/venv/lib/python3.14/site-packages/ansible_collections/arista/eos/pyproject.toml
./examples/venv/lib/python3.14/site-packages/ansible_collections/splunk/es/pyproject.toml
./examples/venv/lib/python3.14/site-packages/ansible_collections/ansible/netcommon/pyproject.toml
./examples/venv/lib/python3.14/site-packages/ansible_collections/ansible/utils/pyproject.toml
./examples/venv/lib/python3.14/site-packages/ansible_collections/vyos/vyos/pyproject.toml
./examples/venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks
./examples/venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/_impl.py
./examples/venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/py.typed
./examples/venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/__pycache__
./examples/venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/__pycache__/__init__.cpython-314.pyc
./examples/venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/__pycache__/_impl.cpython-314.pyc
./examples/venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/_in_process
./examples/venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/_in_process/__pycache__
./examples/venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/_in_process/__pycache__/__init__.cpython-314.pyc
./examples/venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/_in_process/__pycache__/_in_process.cpython-314.pyc
./examples/venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/_in_process/__init__.py
./examples/venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/_in_process/_in_process.py
./examples/venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/__init__.py
./examples/venv/lib/python3.14/site-packages/pip/_internal/__pycache__/pyproject.cpython-314.pyc
./examples/venv/lib/python3.14/site-packages/pip/_internal/pyproject.py
./.venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks
./.venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/_impl.py
./.venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/py.typed
./.venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/__pycache__
./.venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/__pycache__/__init__.cpython-314.pyc
./.venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/__pycache__/_impl.cpython-314.pyc
./.venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/_in_process
./.venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/_in_process/__pycache__
./.venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/_in_process/__pycache__/__init__.cpython-314.pyc
./.venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/_in_process/__pycache__/_in_process.cpython-314.pyc
./.venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/_in_process/__init__.py
./.venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/_in_process/_in_process.py
./.venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/__init__.py
./.venv/lib/python3.14/site-packages/pip/_internal/__pycache__/pyproject.cpython-314.pyc
./.venv/lib/python3.14/site-packages/pip/_internal/pyproject.py
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # subl /root/research/kAFL/kafl/fuzzer/kafl_fuzzer/manager/core.py 
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # cd fuzzer/kafl_fuzzer
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/fuzzer/kafl_fuzzer # grep -r forkserver
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/fuzzer/kafl_fuzzer # grep -r "\"fork\""
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/fuzzer/kafl_fuzzer # 
^[[200~grep -R "set_start_method" .
^[[201~(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/fuzzer/kafl_fugrep -R "set_start_method" .thod" .
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/fuzzer/kafl_fuzzer # 
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/fuzzer/kafl_fuzzer # 
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/fuzzer/kafl_fuzzer # 
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/fuzzer/kafl_fuzzer # ^C
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/fuzzer/kafl_fuzzer # ^C
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/fuzzer/kafl_fuzzer # grp -r ^C
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/fuzzer/kafl_fuzzer # grep -r forkserv
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/fuzzer/kafl_fuzzer # grep -R "spawn" .
./coverage/__init__.py:        # spawn worker in same workdir, picking up snapshot + page_cache
./coverage/__init__.py:        # spawn worker in separate workdir, booting a new VM state
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/fuzzer/kafl_fuzzer # gre p-r ge^C
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/fuzzer/kafl_fuzzer # grep -r get_co
technique/redqueen/workdir.py:        return self.base_path + "/target_code_dump.img"
grep: technique/redqueen/__pycache__/workdir.cpython-314.pyc: binary file matches
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/fuzzer/kafl_fuzzer # cd ..
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/fuzzer # cd ..
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # 
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # # Copyright 2017-2019 Sergej Schumilo, Cornelius Aschermann, Tim Blazytko
# Copyright 2019-2020 Intel Corporation
#
# SPDX-License-Identifier: AGPL-3.0-or-later

"""
Startup routines for kAFL Fuzzer.

Spawn a Manager and one or more Worker processes, where Manager implements the
global fuzzing queue and scheduler and Workers implement mutation stages and
Qemu/KVM execution.

Prepare the kAFL workdir and copy any provided seeds to be picked up by the scheduler.
"""

from contextlib import suppress
import multiprocessing

try:
    multiprocessing.set_start_method("fork", force=True)
except RuntimeError:
    printf("Fuck!!!!!!")
    pass

import time
import os
import sys
import logging

import yaml
from dynaconf import LazySettings

from kafl_fuzzer.common.util import print_banner
from kafl_fuzzer.common.self_check import self_check, post_self_check
from kafl_fuzzer.common.util import prepare_working_dir, copy_seed_files, qemu_sweep, filter_available_cpus
from kafl_fuzzer.common.logger import add_logging_file
from kafl_fuzzer.manager.manager import ManagerTask
from kafl_fuzzer.worker.worker import worker_loader
from kafl_fuzzer.common.config.settings import dump_config, INTEL_PT_MAX_RANGES

logger = logging.getLogger(__name__)

def graceful_exit(workers):
    for s in workers:
        s.terminate()

    logger.info("Waiting for Workers to shutdown...")
    time.sleep(1)

    while len(workers) > 0:
        for s in workers:
            if s and s.exitcode is None:
                logger.info("Still waiting on %s (pid=%d)..  [hit Ctrl-c to abort..]" % (s.name, s.pid))
                s.join(timeout=1)
            else:
                workers.remove(s)


def start(settings: LazySettings):

    print_banner("kAFL Fuzzer")

    if not self_check():
        return 1

    workdir   = settings.workdir
    seed_dir   = settings.seed_dir
    num_worker = settings.processes

    if not post_self_check(settings):
        logger.error("Startup checks failed. Exit.")
        return -1

    if not prepare_working_dir(settings):
        logger.error("Failed to prepare working directory. Exit.")
        return -1;

    # initialize logger after workdir purge
    # otherwise the file handler created is removed
    add_logging_file(settings)

    if seed_dir:
        if not copy_seed_files(workdir, seed_dir):
            logger.error("Error when importing seeds. Exit.")
            return 1
    else:
        logger.warn("Warning: Launching without --seed-dir?")
        time.sleep(1)

    # Without -ip0, Qemu will not active PT tracing and we turn into a blind fuzzer
    if not settings.ip0:
        logger.warn("No PT trace region defined.")

    avail, used = filter_available_cpus()
    if num_worker > len(avail):
        logger.error(f"Requested {num_worker} workers but only {len(avail)} vCPUs detected.")
        return 1

    # warn if assigned cpu set seems to be used by other Qemu instances already
    # attempt to confine ourselves to unused set, unless --cpu-offset override was given
    if num_worker + 1 >= len(avail-used):
        logger.warn(f"Warning: Requested {num_worker} workers but {len(used)} out of {len(avail)} vCPUs seem busy?")
        time.sleep(2)
    elif not settings.cpu_offset:
        os.sched_setaffinity(0, avail-used)

    manager = ManagerTask(settings)

    workers = []
    for i in range(num_worker):
        workers.append(multiprocessing.Process(name="Worker " + str(i), target=worker_loader, args=(i,settings)))
        workers[i].start()

    try:
        manager.loop()
    except KeyboardInterrupt:
        logger.info("Received Ctrl-C, killing workers...")
    except SystemExit as e:
        logger.info("Manager exit: " + str(e))
    finally:
        graceful_exit(workers)
        # parse snapshot/state.yaml if exists and update config dump 
        with suppress(FileNotFoundError):
            with open(settings.workdir_snap_state_meta, 'r') as f:
                logging.debug("Parsing %s", settings.workdir_snap_state_meta)
                snap_state = yaml.safe_load(f)
                # update fuzzer config
                for i in range(INTEL_PT_MAX_RANGES):
                    if snap_state['processor_trace'][f'pt_ip_filter_configured_{i}']:
                        # receive list of 2 strings, convert to int, convert to hex string, remove prefix
                        low,high = [hex(int(x)).replace('0x', '') for x in snap_state['processor_trace'][f'pt_ip_filter_{i}']]
                        # convert to kafl IP settings format
                        settings[f'ip{i}'] = f'{low}-{high}'
                        logging.debug("Updating IP%s: %s", i, settings[f'ip{i}'])
            # dump config again
            dump_config()

    time.sleep(1)
    qemu_sweep("Detected potential qemu zombies, try to kill -9:")
    sys.exit(0)
^C
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # cd examples/windows_x86_64/
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # ls
Makefile  README.md  Vagrantfile  ansible.cfg  bin  kafl.yaml  setup_target.sh  setup_target.yml  src  stuff.sh  test.xml
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # kafl fuzz

    __                        __  ___    ________
   / /_____  _________  ___  / / /   |  / ____/ /
  / //_/ _ \/ ___/ __ \/ _ \/ / / /| | / /_  / /
 / ,< /  __/ /  / / / /  __/ / / ___ |/ __/ / /___
/_/|_|\___/_/  /_/ /_/\___/_/ /_/  |_/_/   /_____/
===================================================

<< kAFL Fuzzer >>

Refuse to operate on existing workdir, supply either --purge or --resume.
Failed to prepare working directory. Exit.
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # kafl fuzz --purge

    __                        __  ___    ________
   / /_____  _________  ___  / / /   |  / ____/ /
  / //_/ _ \/ ___/ __ \/ _ \/ / / /| | / /_  / /
 / ,< /  __/ /  / / / /  __/ / / ___ |/ __/ / /___
/_/|_|\___/_/  /_/ /_/\___/_/ /_/  |_/_/   /_____/
===================================================

<< kAFL Fuzzer >>

Warning: Launching without --seed-dir?
No PT trace region defined.
00:00:00:     0 exec/s,    0 edges,  0% favs pending, findings: <0, 0, 0>
Worker-00 Launching virtual machine...
/root/research/kAFL/kafl/qemu/x86_64-softmmu/qemu-system-x86_64
	-enable-kvm
	-machine kAFL64-v1
	-cpu kAFL64-Hypervisor-v1,+vmx
	-no-reboot
	-net none
	-display none
	-chardev socket,server,id=nyx_socket,path=/dev/shm/kafl_root/interface_0
	-device nyx,chardev=nyx_socket,workdir=/dev/shm/kafl_root,worker_id=0,bitmap_size=65536,input_buffer_size=131072
	-device isa-serial,chardev=kafl_serial
	-chardev file,id=kafl_serial,mux=on,path=/dev/shm/kafl_root/serial_00.log
	-m 4096
	-drive file=/root/.local/share/libvirt/images/windows_x86_64_vagrant-kafl-windows.img
	-monitor unix:/tmp/monitor.sock,server,nowait
	-fast_vm_reload path=/dev/shm/kafl_root/snapshot/,load=off
[QEMU-NYX] Max Dirty Ring Size -> 1048576 (Entries: 65536)
qemu-system-x86_64: warning: host doesn't support requested feature: CPUID.07H:EBX.hle [bit 4]
qemu-system-x86_64: warning: host doesn't support requested feature: CPUID.07H:EBX.rtm [bit 11]
[QEMU-NYX] Dirty ring mmap region located at 0x78018c780000
[QEMU-NYX] Warning: Invalid sharedir...
[QEMU-NYX] Booting VM to start fuzzing...

^CReceived Ctrl-C, killing workers...
Waiting for Workers to shutdown...
Worker-00 Shutting down Qemu after 0 execs..
qemu-system-x86_64: terminating on signal 15 from pid 284798 (/root/research/kAFL/kafl/.venv/bin/python3)
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # touch run_machine.sh
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # vim run_machine.sh 
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # chmod +x run_machine.sh 
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # ./run_machine.sh 
VNC server running on 127.0.0.1:5900
^C(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # vim run_machine.sh 
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # cat ^C
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # vim run_machine.sh 
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # ./run_machine.sh 
VNC server running on 127.0.0.1:5900
^C(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # vim run_machine.sh 
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # ./run_machine.sh 
qemu-system-x86_64: Display 'gtk' is not available.
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # vim run_machine.sh 
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # ./run_machine.sh 
^C(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # cat run_machine.sh 
/root/research/kAFL/kafl/qemu/x86_64-softmmu/qemu-system-x86_64 \
	-enable-kvm \
	-machine kAFL64-v1 \
	-cpu kAFL64-Hypervisor-v1,+vmx \
	-no-reboot \
	-net none \
	-chardev socket,server,id=nyx_socket,path=/dev/shm/kafl_root/interface_0 \
	-device nyx,chardev=nyx_socket,workdir=/dev/shm/kafl_root,worker_id=0,bitmap_size=65536,input_buffer_size=131072 \
	-device isa-serial,chardev=kafl_serial \
	-chardev file,id=kafl_serial,mux=on,path=/dev/shm/kafl_root/serial_00.log \
	-m 4096 \
	-drive file=/root/.local/share/libvirt/images/windows_x86_64_vagrant-kafl-windows.img \
	-monitor unix:/tmp/monitor.sock,server,nowait \
	-fast_vm_reload path=/dev/shm/kafl_root/snapshot/,load=off

(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 #   vim run_machine.sh 
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # ./run_machine.sh 
qemu-system-x86_64: Display 'sdl' is not available.
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # cat run_machine.sh 
/root/research/kAFL/kafl/qemu/x86_64-softmmu/qemu-system-x86_64 \
	-enable-kvm \
	-machine kAFL64-v1 \
	-cpu kAFL64-Hypervisor-v1,+vmx \
	-no-reboot \
	-net none \
	-display sdl \
	-chardev socket,server,id=nyx_socket,path=/dev/shm/kafl_root/interface_0 \
	-device nyx,chardev=nyx_socket,workdir=/dev/shm/kafl_root,worker_id=0,bitmap_size=65536,input_buffer_size=131072 \
	-device isa-serial,chardev=kafl_serial \
	-chardev file,id=kafl_serial,mux=on,path=/dev/shm/kafl_root/serial_00.log \
	-m 4096 \
	-drive file=/root/.local/share/libvirt/images/windows_x86_64_vagrant-kafl-windows.img \
	-monitor unix:/tmp/monitor.sock,server,nowait \
	-fast_vm_reload path=/dev/shm/kafl_root/snapshot/,load=off

(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # vim run_machine.sh 
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # ./run_machine.sh 
qemu-system-x86_64: -display vnc: VNC requires a display argument vnc=<display>
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # vim run_machine.sh 
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # ./run_machine.sh 
qemu-system-x86_64: -display vnc: VNC requires a display argument vnc=<display>
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # ./run_machine.sh   ca^C
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # cat run_machine.sh 
/root/research/kAFL/kafl/qemu/x86_64-softmmu/qemu-system-x86_64 \
	-enable-kvm \
	-machine kAFL64-v1 \
	-cpu kAFL64-Hypervisor-v1,+vmx \
	-no-reboot \
	-net none \
	-display vnc 127.0.0.1:0 \
	-chardev socket,server,id=nyx_socket,path=/dev/shm/kafl_root/interface_0 \
	-device nyx,chardev=nyx_socket,workdir=/dev/shm/kafl_root,worker_id=0,bitmap_size=65536,input_buffer_size=131072 \
	-device isa-serial,chardev=kafl_serial \
	-chardev file,id=kafl_serial,mux=on,path=/dev/shm/kafl_root/serial_00.log \
	-m 4096 \
	-drive file=/root/.local/share/libvirt/images/windows_x86_64_vagrant-kafl-windows.img \
	-monitor unix:/tmp/monitor.sock,server,nowait \
	-fast_vm_reload path=/dev/shm/kafl_root/snapshot/,load=off

(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # vim run_machine.sh 
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # ./run_machine.sh 












ca

and some more debugging here:

root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # vncviewer localhost:5900
Command 'vncviewer' not found, did you mean:
  command 'gvncviewer' from deb gvncviewer (1.5.0-1build1)
Try: apt install <deb name>
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # vncviewer
Command 'vncviewer' not found, did you mean:
  command 'gvncviewer' from deb gvncviewer (1.5.0-1build1)
Try: apt install <deb name>
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 #   sudo apt install tigervnc-viewer
The following packages were automatically installed and are no longer required:
  bpfcc-tools  bpftrace  libbpfcc  python3-bpfcc  ubuntu-kernel-accessories
Use 'sudo apt autoremove' to remove them.

Installing:
  tigervnc-viewer

Installing dependencies:
  libfltk-images1.3t64  libfltk1.3t64  libswscale9

Suggested packages:
  tigervnc-tools

Summary:
  Upgrading: 0, Installing: 4, Removing: 0, Not Upgrading: 29
  Download size: 1,432 kB
  Space needed: 4,449 kB / 857 GB available

Continue? [Y/n] Y
Get:1 http://mirror.hetzner.com/ubuntu/packages resolute/universe amd64 libfltk1.3t64 amd64 1.3.11-3 [612 kB]
Get:2 http://mirror.hetzner.com/ubuntu/packages resolute/universe amd64 libfltk-images1.3t64 amd64 1.3.11-3 [28.8 kB]
Get:3 http://mirror.hetzner.com/ubuntu/packages resolute/universe amd64 libswscale9 amd64 7:8.0.1-3ubuntu2 [411 kB]
Get:4 http://mirror.hetzner.com/ubuntu/packages resolute/universe amd64 tigervnc-viewer amd64 1.15.0+dfsg-2build1 [380 kB]
Fetched 1,432 kB in 0s (4,811 kB/s)       
Selecting previously unselected package libfltk1.3t64:amd64.
(Reading database… 191225 files and directories currently installed.)
Preparing to unpack …/libfltk1.3t64_1.3.11-3_amd64.deb…
Unpacking libfltk1.3t64:amd64 (1.3.11-3)…
Selecting previously unselected package libfltk-images1.3t64:amd64.
Preparing to unpack …/libfltk-images1.3t64_1.3.11-3_amd64.deb…
Unpacking libfltk-images1.3t64:amd64 (1.3.11-3)…
Selecting previously unselected package libswscale9:amd64.
Preparing to unpack …/libswscale9_7%3a8.0.1-3ubuntu2_amd64.deb…
Unpacking libswscale9:amd64 (7:8.0.1-3ubuntu2)…
Selecting previously unselected package tigervnc-viewer.
Preparing to unpack …/tigervnc-viewer_1.15.0+dfsg-2build1_amd64.deb…
Unpacking tigervnc-viewer (1.15.0+dfsg-2build1)…
Setting up libswscale9:amd64 (7:8.0.1-3ubuntu2)…
Setting up libfltk1.3t64:amd64 (1.3.11-3)…
Setting up libfltk-images1.3t64:amd64 (1.3.11-3)…
Setting up tigervnc-viewer (1.15.0+dfsg-2build1)…
update-alternatives: using /usr/bin/xtigervncviewer to provide /usr/bin/vncviewe
r (vncviewer) in auto mode
Processing triggers for hicolor-icon-theme (0.18-2build1)…
Processing triggers for libc-bin (2.43-2ubuntu2)…
Processing triggers for man-db (2.13.1-1build1)…
Processing triggers for desktop-file-utils (0.28-1build1)…
Scanning processes...                                                           
Scanning candidates...                                                          
Scanning processor microcode...                                                 
Scanning linux images...                                                        

Pending kernel upgrade!
Running kernel version:
  6.8.0-nyx+
Diagnostics:
  The currently running kernel version is not the expected kernel version
7.0.0-28-generic.

Restarting the system to load the new kernel will not be handled automatically,
so you should consider rebooting.

The processor microcode seems to be up-to-date.

Restarting services...

Service restarts being deferred:
 systemctl restart networkd-dispatcher.service
 systemctl restart systemd-logind.service
 systemctl restart unattended-upgrades.service
 systemctl restart virtlockd.service
 systemctl restart virtlogd.service
 systemctl restart xrdp-sesman.service
 systemctl restart xrdp.service

No containers need to be restarted.

User sessions running outdated binaries:
 root @ session #1: sshd-session[2060]
 root @ session #4: sshd-session[4544]
 root @ user manager: (sd-pam)[2068]

No VM guests are running outdated hypervisor (qemu) binaries on this host.
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # vncviewer localhost:5900

TigerVNC viewer v1.15.0
Built on: 2025-12-28 11:18
Copyright (C) 1999-2025 TigerVNC team and many others (see README.rst)
See https://www.tigervnc.org for information on TigerVNC.

Mon Jul 27 23:06:03 2026
 DecodeManager: Detected 16 CPU core(s)
 DecodeManager: Creating 4 decoder thread(s)
 CConn:       Unable to connect to socket: Connection refused (111)
 DecodeManager:   Total: 0 rects, 0 pixels
 DecodeManager:          0 B (1:-nan ratio)
Fontconfig warning: using without calling FcInit()

Mon Jul 27 23:06:09 2026
 DecodeManager: Detected 16 CPU core(s)
 DecodeManager: Creating 4 decoder thread(s)
 CConn:       Unable to connect to socket: Connection refused (111)
 DecodeManager:   Total: 0 rects, 0 pixels
 DecodeManager:          0 B (1:-nan ratio)
 DecodeManager: Detected 16 CPU core(s)
 DecodeManager: Creating 4 decoder thread(s)
 CConn:       Unable to connect to socket: Connection refused (111)
 DecodeManager:   Total: 0 rects, 0 pixels
 DecodeManager:          0 B (1:-nan ratio)
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # ps -aux | grep qemu
root      285256  0.0  0.0 103864 19584 pts/2    Sl+  23:05   0:00 /root/research/kAFL/kafl/qemu/x86_64-softmmu/qemu-system-x86_64 -enable-kvm -machine kAFL64-v1 -cpu kAFL64-Hypervisor-v1,+vmx -no-reboot -net none -display vnc=127.0.0.1:0 -chardev socket,server,id=nyx_socket,path=/dev/shm/kafl_root/interface_0 -device nyx,chardev=nyx_socket,workdir=/dev/shm/kafl_root,worker_id=0,bitmap_size=65536,input_buffer_size=131072 -device isa-serial,chardev=kafl_serial -chardev file,id=kafl_serial,mux=on,path=/dev/shm/kafl_root/serial_00.log -m 4096 -drive file=/root/.local/share/libvirt/images/windows_x86_64_vagrant-kafl-windows.img -monitor unix:/tmp/monitor.sock,server,nowait -fast_vm_reload path=/dev/shm/kafl_root/snapshot/,load=off
root      285725  0.0  0.0   6708  2560 pts/5    S+   23:06   0:00 grep --color=auto qemu
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 #   socat - UNIX-CONNECT:/tmp/monitor.sock
Command 'socat' not found, but can be installed with:
apt install socat
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # apt install socat
The following packages were automatically installed and are no longer required:
  bpfcc-tools  bpftrace  libbpfcc  python3-bpfcc  ubuntu-kernel-accessories
Use 'apt autoremove' to remove them.

Installing:
  socat

Summary:
  Upgrading: 0, Installing: 1, Removing: 0, Not Upgrading: 29
  Download size: 403 kB
  Space needed: 1,764 kB / 857 GB available

Get:1 http://mirror.hetzner.com/ubuntu/packages resolute-updates/main amd64 socat amd64 1.8.1.1-1ubuntu0.1 [403 kB]
Fetched 403 kB in 0s (2,387 kB/s)
Selecting previously unselected package socat.
(Reading database… 191295 files and directories currently installed.)
Preparing to unpack …/socat_1.8.1.1-1ubuntu0.1_amd64.deb…
Unpacking socat (1.8.1.1-1ubuntu0.1)…
Setting up socat (1.8.1.1-1ubuntu0.1)…
Processing triggers for man-db (2.13.1-1build1)…
Scanning processes...                                                           
Scanning candidates...                                                          
Scanning processor microcode...                                                 
Scanning linux images...                                                        

Pending kernel upgrade!
Running kernel version:
  6.8.0-nyx+
Diagnostics:
  The currently running kernel version is not the expected kernel version
7.0.0-28-generic.

Restarting the system to load the new kernel will not be handled automatically,
so you should consider rebooting.

The processor microcode seems to be up-to-date.

Restarting services...

Service restarts being deferred:
 systemctl restart networkd-dispatcher.service
 systemctl restart systemd-logind.service
 systemctl restart unattended-upgrades.service
 systemctl restart virtlockd.service
 systemctl restart virtlogd.service
 systemctl restart xrdp-sesman.service
 systemctl restart xrdp.service

No containers need to be restarted.

User sessions running outdated binaries:
 root @ session #1: sshd-session[2060]
 root @ session #4: sshd-session[4544]
 root @ user manager: (sd-pam)[2068]

No VM guests are running outdated hypervisor (qemu) binaries on this host.
socat - UNIX-CONNECT:/tmp/monitor.sock
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # socat - UNIX-CONNECT:/tmp/monitor.sock
2026/07/27 23:06:50 socat[285996] E connect(, AF=1 "/tmp/monitor.sock", 19): No such file or directory
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # 
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # 
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # socat - UNIX-CONNECT:/tmp/monitor.sock
2026/07/27 23:06:54 socat[286000] E connect(, AF=1 "/tmp/monitor.sock", 19): No such file or directory
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # ^C
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # ls -l /proc/285256/fd | head -40
total 0
lrwx------ 1 root root 64 Jul 27 23:07 0 -> /dev/pts/2
lrwx------ 1 root root 64 Jul 27 23:07 1 -> /dev/pts/2
lrwx------ 1 root root 64 Jul 27 23:07 10 -> anon_inode:[eventfd]
lrwx------ 1 root root 64 Jul 27 23:07 2 -> /dev/pts/2
lrwx------ 1 root root 64 Jul 27 23:07 3 -> anon_inode:[eventpoll]
lrwx------ 1 root root 64 Jul 27 23:07 4 -> anon_inode:[eventfd]
lrwx------ 1 root root 64 Jul 27 23:07 5 -> anon_inode:[signalfd]
lrwx------ 1 root root 64 Jul 27 23:07 6 -> anon_inode:[eventpoll]
lrwx------ 1 root root 64 Jul 27 23:07 7 -> anon_inode:[eventfd]
lrwx------ 1 root root 64 Jul 27 23:07 8 -> anon_inode:[eventfd]
lrwx------+1 root root 64 Jul 27 23:07 9 -> socket:[355485]
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 #    ls -lah /dev/shm/kafl_root
total 16K
drwxr-xr-x 12 root root  420 Jul 27 23:05 .
drwxrwxrwt  3 root root   60 Jul 27 22:52 ..
drwxr-xr-x  2 root root  120 Jul 27 22:52 bitmaps
-rw-r--r--  1 root root 1.6K Jul 27 22:52 config.yaml
drwxr-xr-x  6 root root  120 Jul 27 22:52 corpus
drwxr-xr-x  2 root root   40 Jul 27 22:52 dump
drwxr-xr-x  2 root root   40 Jul 27 22:52 funky
drwxr-xr-x  2 root root   40 Jul 27 22:52 imports
srwxr-xr-x  1 root root    0 Jul 27 23:05 interface_0
drwxr-xr-x  2 root root   40 Jul 27 22:52 logs
drwxr-xr-x  2 root root   40 Jul 27 22:52 metadata
-rw-r--r--  1 root root    0 Jul 27 22:52 page_cache.addr
-rw-r--r--  1 root root    0 Jul 27 22:52 page_cache.dump
-rw-r--r--  1 root root    0 Jul 27 22:52 page_cache.lock
drwxr-xr-x  2 root root   40 Jul 27 22:52 radamsa_0
-rw-r--r--  1 root root    0 Jul 27 22:52 serial_00.log
drwxr-xr-x  2 root root   40 Jul 27 22:52 snapshot
-rw-r--r--  1 root root  273 Jul 27 22:52 stats
-rw-r--r--  1 root root  122 Jul 27 22:52 stats.csv
drwxr-xr-x  2 root root   40 Jul 27 22:52 traces
-rw-r--r--  1 root root  169 Jul 27 22:52 worker_stats_0
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 #  ls -lah /dev/shm/kafl_root/snapshot
total 0
drwxr-xr-x  2 root root  40 Jul 27 22:52 .
drwxr-xr-x 12 root root 420 Jul 27 23:05 ..
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # >top -H -p $(pidof qemu-system-x86_64)^C
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # top -H -p $(pidof qemu-system-x86_64)

top - 23:08:43 up 20:47,  3 users,  load average: 0.04, 0.10, 0.16
Threads:   2 total,   0 running,   2 sleeping,   0 stopped,   0 zombie
%Cpu(s):  0.6 us,  0.0 sy,  0.0 ni, 99.4 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st 
MiB Mem : 128726.8 total,  37331.7 free,   2487.6 used,  90300.1 buff/cache     
MiB Swap:   4091.0 total,   4091.0 free,      0.0 used. 126239.2 avail Mem 

    PID USER      PR  NI    VIRT    RES    SHR S  %CPU  %MEM     TIME+ COMMAND  
 285256 root      20   0  103864  19584  14848 S   0.0   0.0   0:00.00 qemu-sy+ 
 285257 root      20   0  103864  19584  14848 S   0.0   0.0   0:00.00 qemu-sy+ 















root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # 
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # -rw-r--r--  1 root root  169 Jul 27 22:52 worker_stats_0
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 #  ls -lah /dev/shm/kafl_root/snapshot
total 0
drwxr-xr-x  2 root root  40 Jul 27 22:52 .
drwxr-xr-x 12 root root 420 Jul 27 23:05 ..
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # >top -H -p $(pidof qemu-system-x86_64)^C
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # top -H -p $(pidof qemu-system-x86_64)

top - 23:08:43 up 20:47,  3 users,  load average: 0.04, 0.10, 0.16
Threads:   2 total,   0 running,   2 sleeping,   0 stopped,   0 zombie
%Cpu(s):  0.6 us,  0.0 sy,  0.0 ni, 99.4 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st  
MiB Mem : 128726.8 total,  37331.7 free,   2487.6 used,  90300.1 buff/cache      
MiB Swap:   4091.0 total,   4091.0 free,      0.0 used. 126239.2 avail Mem 

    PID USER      PR  NI    VIRT    RES    SHR S  %CPU  %MEM     TIME+ COMMAND   
 285256 root      20   0  103864  19584  14848 S   0.0   0.0   0:00.00 qemu-sy+  
 285257 root      20   0  103864  19584  14848 S   0.0   0.0   0:00.00 qemu-sy+  





^C
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # strace -f -p $(pidof qemu-system-x86_64)
strace: Process 285256 attached with 2 threads
[pid 285257] futex(0x64894269a8a8, FUTEX_WAIT, 4294967295, NULL <unfinished ...>
[pid 285256] ppoll([{fd=9, events=POLLIN}, {fd=10, events=POLLIN}], 2, NULL, NULL, 8^Cstrace: Process 285257 detached
strace: Process 285256 detached
 <detached ...>

root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # ps -aux | grep qemu
root      285256  0.0  0.0 103864 19584 pts/2    Sl+  23:05   0:00 /root/research/kAFL/kafl/qemu/x86_64-softmmu/qemu-system-x86_64 -enable-kvm -machine kAFL64-v1 -cpu kAFL64-Hypervisor-v1,+vmx -no-reboot -net none -display vnc=127.0.0.1:0 -chardev socket,server,id=nyx_socket,path=/dev/shm/kafl_root/interface_0 -device nyx,chardev=nyx_socket,workdir=/dev/shm/kafl_root,worker_id=0,bitmap_size=65536,input_buffer_size=131072 -device isa-serial,chardev=kafl_serial -chardev file,id=kafl_serial,mux=on,path=/dev/shm/kafl_root/serial_00.log -m 4096 -drive file=/root/.local/share/libvirt/images/windows_x86_64_vagrant-kafl-windows.img -monitor unix:/tmp/monitor.sock,server,nowait -fast_vm_reload path=/dev/shm/kafl_root/snapshot/,load=off
root      286098  0.0  0.0   6708  2560 pts/5    S+   23:09   0:00 grep --color=auto qemu
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # 

what gives??+ My patches are these here:

oot      286098  0.0  0.0   6708  2560 pts/5    S+   23:09   0:00 grep --color=auto qemu
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # cd ^C
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # cd ..
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples # cd ..
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # cd ..
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL # git diff
diff --git a/deploy/requirements.txt b/deploy/requirements.txt
index a5cb7ad..9592ab4 100644
--- a/deploy/requirements.txt
+++ b/deploy/requirements.txt
@@ -1,5 +1,5 @@
 ansible>=10.7.0
-cffi==1.15.0
+cffi>=2.0.0
 cryptography==44.0.1
 Jinja2==3.1.5
 MarkupSafe==2.1.1
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL # cd kafl/
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # git diff
diff --git a/deploy/requirements.txt b/deploy/requirements.txt
index a5cb7ad..9592ab4 100644
--- a/deploy/requirements.txt
+++ b/deploy/requirements.txt
@@ -1,5 +1,5 @@
 ansible>=10.7.0
-cffi==1.15.0
+cffi>=2.0.0
 cryptography==44.0.1
 Jinja2==3.1.5
 MarkupSafe==2.1.1
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # 
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # ls
capstone  env.sh  examples  fuzzer  ghidra_10.1.3_PUBLIC  libxdc  qemu  radamsa
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl # cd examples/
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples # git diff
diff --git a/templates/windows/ansible.cfg b/templates/windows/ansible.cfg
index 663545c..4d9dacc 100644
--- a/templates/windows/ansible.cfg
+++ b/templates/windows/ansible.cfg
@@ -1,2 +1,3 @@
 [defaults]
-stdout_callback = yaml
\ No newline at end of file
+stdout_callback = ansible.builtin.default
+result_format = yaml
diff --git a/templates/windows/playbook.yml b/templates/windows/playbook.yml
index 43358f7..d1465a3 100644
--- a/templates/windows/playbook.yml
+++ b/templates/windows/playbook.yml
@@ -71,41 +71,136 @@
         type: dword
         state: present
 
-    - name: Download Visual Studio 2022 community installer
+    - name: Reboot before installing Visual Studio
+      ansible.windows.win_reboot:
+        reboot_timeout: 1800
+        post_reboot_delay: 30
+
+    - name: Download Visual Studio 2022 Community installer
       win_get_url:
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples # git diff > diff.diff
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples # cat diff.diff 
diff --git a/templates/windows/ansible.cfg b/templates/windows/ansible.cfg
index 663545c..4d9dacc 100644
--- a/templates/windows/ansible.cfg
+++ b/templates/windows/ansible.cfg
@@ -1,2 +1,3 @@
 [defaults]
-stdout_callback = yaml
\ No newline at end of file
+stdout_callback = ansible.builtin.default
+result_format = yaml
diff --git a/templates/windows/playbook.yml b/templates/windows/playbook.yml
index 43358f7..d1465a3 100644
--- a/templates/windows/playbook.yml
+++ b/templates/windows/playbook.yml
@@ -71,41 +71,136 @@
         type: dword
         state: present
 
-    - name: Download Visual Studio 2022 community installer
+    - name: Reboot before installing Visual Studio
+      ansible.windows.win_reboot:
+        reboot_timeout: 1800
+        post_reboot_delay: 30
+
+    - name: Download Visual Studio 2022 Community installer
       win_get_url:
         url: https://aka.ms/vs/17/release/vs_Community.exe
-        dest: "{{ ansible_facts['env']['TEMP'] }}\\vs_community.exe"
-
-    # https://learn.microsoft.com/en-us/visualstudio/install/workload-component-id-vs-community?view=vs-2022&preserve-view=true
-    - name: Install Visual Studio Native Desktop Workload
-      win_command:
-        cmd: vs_community.exe --quiet --wait --norestart --add Microsoft.VisualStudio.Workload.NativeDesktop
-      args:
-        chdir: "{{ ansible_facts['env']['TEMP'] }}"
-
-    - name: Install Visual Studio VC Tools x86 x64
-      win_command:
-        cmd: vs_community.exe --quiet --wait --norestart --add Microsoft.VisualStudio.Component.VC.Tools.x86.x64
-      args:
-        chdir: "{{ ansible_facts['env']['TEMP'] }}"
-
-    - name: Install Windows 11 SDK 10.0.22621.0
-      win_command:
-        cmd: vs_community.exe --quiet --wait --norestart --add Microsoft.VisualStudio.Component.Windows11SDK.22621
-      args:
-        chdir: "{{ ansible_facts['env']['TEMP'] }}"
-
-    - name: Install Windows Driver Kit
-      win_command:
-        cmd: vs_community.exe --quiet --wait --norestart --add Component.Microsoft.Windows.DriverKit
-      args:
-        chdir: "{{ ansible_facts['env']['TEMP'] }}"
+        dest: C:\vs_community.exe
+
+    - name: Show free disk space
+      ansible.windows.win_powershell:
+        script: |
+          Get-CimInstance Win32_LogicalDisk |
+            Where-Object DriveType -eq 3 |
+            Select DeviceID,
+                   @{Name="FreeGB";Expression={[math]::Round($_.FreeSpace/1GB,2)}},
+                   @{Name="SizeGB";Expression={[math]::Round($_.Size/1GB,2)}} |
+            Format-Table -AutoSize
+
+    - name: Install Visual Studio
+      block:
+        - name: Install Native Desktop workload
+          ansible.windows.win_powershell:
+            script: |
+              $ErrorActionPreference = "Stop"
+
+              $args = @(
+                "--installPath",
+                "C:\Program Files\Microsoft Visual Studio\2022\Community",
+                "--add",
+                "Microsoft.VisualStudio.Workload.NativeDesktop",
+                "--includeRecommended",
+                "--addProductLang",
+                "en-US",
+                "--passive",
+                "--wait",
+                "--norestart"
+              )
+
+              $p = Start-Process `
+                    -FilePath C:\vs_community.exe `
+                    -ArgumentList $args `
+                    -Wait `
+                    -PassThru
+
+              Write-Host "Exit code = $($p.ExitCode)"
+
+              if ($p.ExitCode -notin @(0,3010,1641)) {
+                  throw "Visual Studio failed with exit code $($p.ExitCode)"
+              }
+
+      rescue:
+        - name: Collect VS installer logs
+          ansible.windows.win_powershell:
+            script: |
+              New-Item C:\vslogs -ItemType Directory -Force | Out-Null
+
+              Get-ChildItem `
+                  C:\Users\*\AppData\Local\Temp `
+                  -Recurse `
+                  -Include dd_*.log `
+                  -ErrorAction SilentlyContinue |
+                  Copy-Item -Destination C:\vslogs -Force
+
+              Compress-Archive `
+                  -Path C:\vslogs\* `
+                  -DestinationPath C:\vslogs.zip `
+                  -Force
+
+        - name: Download logs
+          fetch:
+            src: C:\vslogs.zip
+            dest: ./failure-logs/
+            flat: yes
+
+        - fail:
+            msg: Visual Studio installation failed. Installer logs downloaded.
+
+    - name: Install VC Tools
+      ansible.windows.win_powershell:
+        script: |
+          Start-Process `
+            -FilePath C:\vs_community.exe `
+            -ArgumentList @(
+              "--quiet",
+              "--wait",
+              "--norestart",
+              "--add",
+              "Microsoft.VisualStudio.Component.VC.Tools.x86.x64"
+            ) `
+            -Wait
+
+    - name: Install Windows 11 SDK
+      ansible.windows.win_powershell:
+        script: |
+          Start-Process `
+            -FilePath C:\vs_community.exe `
+            -ArgumentList @(
+              "--quiet",
+              "--wait",
+              "--norestart",
+              "--add",
+              "Microsoft.VisualStudio.Component.Windows11SDK.22621"
+            ) `
+            -Wait
+
+    - name: Install Driver Kit component
+      ansible.windows.win_powershell:
+        script: |
+          Start-Process `
+            -FilePath C:\vs_community.exe `
+            -ArgumentList @(
+              "--quiet",
+              "--wait",
+              "--norestart",
+              "--add",
+              "Component.Microsoft.Windows.DriverKit"
+            ) `
+            -Wait
 
     - name: Download latest WDK for 10.0.22621.0
       win_get_url:
         url: https://go.microsoft.com/fwlink/?linkid=2196230
         dest: "{{ ansible_facts['env']['TEMP'] }}\\wdk_setup.exe"
 
+    - name: Pause for debugging
+      pause:
+        seconds: 180
+
     - name: Install WDK
       win_command:
         cmd: wdk_setup.exe /q /norestart
@@ -114,3 +209,4 @@
 
     - name: Enable Testsigning
       win_command: Bcdedit.exe -set TESTSIGNING ON
+
diff --git a/templates/windows/windows.pkr.hcl b/templates/windows/windows.pkr.hcl
index 6467130..98089ba 100644
--- a/templates/windows/windows.pkr.hcl
+++ b/templates/windows/windows.pkr.hcl
@@ -49,7 +49,7 @@ variable "disk_size" {
 
 variable "headless" {
   type = bool
-  default = true
+  default = false
 }
 
 variable "iso_checksum" {
@@ -66,7 +66,7 @@ variable "iso_url" {
 
 variable "memory" {
   type    = string
-  default = "4096"
+  default = "16384"
 }
 
 variable "vm_name" {
diff --git a/windows_x86_64/Vagrantfile b/windows_x86_64/Vagrantfile
index 285dad9..3a86be8 100644
--- a/windows_x86_64/Vagrantfile
+++ b/windows_x86_64/Vagrantfile
@@ -26,10 +26,13 @@ Vagrant.configure("2") do |config|
         # so kafl can use the VM's qcow as well
         libvirt.uri = "qemu:///session"
         # spice is better than VNC (mouse handling)
-        libvirt.graphics_type = "spice"
+        # libvirt.graphics_type = "spice"
         libvirt.cpus = 4
         libvirt.cputopology :sockets => '1', :cores => '4', :threads => '1'
         libvirt.memory = 4096
+        # Debugging for the QEMU crash...
+        libvirt.cpu_mode = "host-passthrough"
+        libvirt.graphics_type = "vnc"
     end
 
     # workaround https://github.com/hashicorp/vagrant/issues/13193
root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples #   

to get it to work..

Thanks in advance!

[personnumber3377]

Now, after waiting for quite a long time, I eventually get this here:

(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # ./r.sh 
[QEMU-NYX] Max Dirty Ring Size -> 1048576 (Entries: 65536)
[QEMU-NYX] Dirty ring mmap region located at 0x778527f00000
qemu-system-x86_64: /root/research/kAFL/kafl/qemu/nyx/snapshot/block/block_cow.c:450: write_to_primary_buffer: Assertion `self->offset_primary < self->cow_primary_size' failed.
Aborted                    (core dumped) ./r.sh
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # cat r.sh 
#!/bin/bash
exec /root/research/kAFL/kafl/qemu/x86_64-softmmu/qemu-system-x86_64 \
    -enable-kvm \
    -machine q35 \
    -cpu host \
    -m 4096 \
    -drive file=/root/.local/share/libvirt/images/windows_x86_64_vagrant-kafl-windows.img,format=qcow2 \
    -net none \
    -vnc 127.0.0.1:0 \
    -monitor unix:/tmp/monitor-test.sock,server,nowait
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 #  

[personnumber3377]

(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # kafl fuzz --purge

    __                        __  ___    ________
   / /_____  _________  ___  / / /   |  / ____/ /
  / //_/ _ \/ ___/ __ \/ _ \/ / / /| | / /_  / /
 / ,< /  __/ /  / / / /  __/ / / ___ |/ __/ / /___
/_/|_|\___/_/  /_/ /_/\___/_/ /_/  |_/_/   /_____/
===================================================

<< kAFL Fuzzer >>

Warning: Launching without --seed-dir?
No PT trace region defined.
00:00:00:     0 exec/s,    0 edges,  0% favs pending, findings: <0, 0, 0>
Worker-00 Launching virtual machine...
/root/research/kAFL/kafl/qemu/x86_64-softmmu/qemu-system-x86_64
	-enable-kvm
	-machine kAFL64-v1
	-cpu kAFL64-Hypervisor-v1,+vmx
	-no-reboot
	-net none
	-display none
	-chardev socket,server,id=nyx_socket,path=/dev/shm/kafl_root/interface_0
	-device nyx,chardev=nyx_socket,workdir=/dev/shm/kafl_root,worker_id=0,bitmap_size=65536,input_buffer_size=131072
	-device isa-serial,chardev=kafl_serial
	-chardev file,id=kafl_serial,mux=on,path=/dev/shm/kafl_root/serial_00.log
	-m 4096
	-drive file=/root/.local/share/libvirt/images/windows_x86_64_vagrant-kafl-windows.img
	-monitor unix:/tmp/monitor.sock,server,nowait
	-fast_vm_reload path=/dev/shm/kafl_root/snapshot/,load=off
[QEMU-NYX] Max Dirty Ring Size -> 1048576 (Entries: 65536)
qemu-system-x86_64: warning: host doesn't support requested feature: CPUID.07H:EBX.hle [bit 4]
qemu-system-x86_64: warning: host doesn't support requested feature: CPUID.07H:EBX.rtm [bit 11]
[QEMU-NYX] Dirty ring mmap region located at 0x702381900000
[QEMU-NYX] Warning: Invalid sharedir...
[QEMU-NYX] Booting VM to start fuzzing...
qemu-system-x86_64: /root/research/kAFL/kafl/qemu/nyx/snapshot/block/block_cow.c:450: write_to_primary_buffer: Assertion `self->offset_primary < self->cow_primary_size' failed.
[QEMU-NYX] Abort detected (pid: 287125 / signal: 6)
[QEMU-NYX] backtrace() returned 11 addresses:
[QEMU-NYX] 	/root/research/kAFL/kafl/qemu/x86_64-softmmu/qemu-system-x86_64(qemu_backtrace+0x2d) [0x63173b628ebd]
[QEMU-NYX] 	/root/research/kAFL/kafl/qemu/x86_64-softmmu/qemu-system-x86_64(+0x6abf73) [0x63173b628f73]
[QEMU-NYX] 	/usr/lib/x86_64-linux-gnu/libc.so.6(+0x45cb0) [0x702384245cb0]
[QEMU-NYX] 	/usr/lib/x86_64-linux-gnu/libc.so.6(pthread_kill+0x11c) [0x7023842a648c]
[QEMU-NYX] 	/usr/lib/x86_64-linux-gnu/libc.so.6(gsignal+0x1e) [0x702384245b7e]
[QEMU-NYX] 	/usr/lib/x86_64-linux-gnu/libc.so.6(abort+0x27) [0x7023842288ec]
[QEMU-NYX] 	/usr/lib/x86_64-linux-gnu/libc.so.6(+0x29979) [0x702384229979]
[QEMU-NYX] 	/usr/lib/x86_64-linux-gnu/libc.so.6(__assert_fail+0xb5) [0x70238423bf75]
[QEMU-NYX] 	/root/research/kAFL/kafl/qemu/x86_64-softmmu/qemu-system-x86_64(+0x542823) [0x63173b4bf823]
[QEMU-NYX] 	/root/research/kAFL/kafl/qemu/x86_64-softmmu/qemu-system-x86_64(+0xad384b) [0x63173ba5084b]
[QEMU-NYX] 	/usr/lib/x86_64-linux-gnu/libc.so.6(+0x63120) [0x702384263120]
[QEMU-NYX] Error: Exit after SIGABRT. Check logs for details.
Worker-00 Guest ABORT: Exit after SIGABRT. Check logs for details.
Worker-00 Failed to connect to Qemu: Guest ABORT: Exit after SIGABRT. Check logs for details.
Worker-00 Shutting down Qemu after 0 execs..
Worker-00 Failed to launch Qemu.
Worker 0 sent ABORT..
Manager exit: Workers aborted before becoming ready. Likely broken VM or agent setup.
Waiting for Workers to shutdown...
(.venv) root@Ubuntu-2604-resolute-amd64-base ~/research/kAFL/kafl/examples/windows_x86_64 # 

[personnumber3377]

The binaries are on the desktop and I can launch them normally when starting with regular qemu.

[Wenzel]

Thanks for the detailed report and debugging! I reproduced the full workflow (template build, import, provision, fuzz) on a bare-metal host with real Intel VT-x/PT (no nested virtualization), and none of the three failures showed up:

• make build completed cleanly in ~26 min, Ansible recap failed=0, no 1603 error from the VS installer with the default --quiet flag.
• make import / make init / make provision_driver all matched the docs exactly.
• kafl fuzz --purge booted immediately and found a crash (w00t payload) within a few minutes, with no block_cow.c assertion or hang.

Given that, this looks like it's specific to running kAFL/Nyx inside a nested VM rather than a bug in the template or example. kAFL relies on direct hardware VT-x/PT access, which nested virtualization doesn't reliably provide; that would explain both the installer flakiness under WinRM and the snapshot/COW corruption in block_cow.c. We don't currently support nested virt as a host environment.

If you're running on a nested VM, could you confirm, and if possible retest on bare metal? Happy to keep digging if it still reproduces there.