Dump the actual payload from harness

[jzy2000]

When kAFL detects a crash, it stores the input payload generated by kAFL in the corpus/crash directory.

For structure-aware fuzzing, the harness often modifies the original payload (e.g., fixing structural fields, updating checksums, or normalizing dependent values) before forwarding it to the fuzzing target. As a result, the payload recorded by kAFL may differ from the actual input that triggers the crash.

Are there any recommended methods to record or retrieve the final payload produced by the harness at the moment kAFL detects a crash?