The "unable to patch/setup" error means Rufus successfully wrote the base image but —the moment it tries to customize boot files inside the newly created partition.
Temporarily disable real-time protection (just during Rufus operation). Better yet, add an exclusion for rufus.exe and your USB drive’s letter in Windows Security → Virus & threat protection → Manage settings → Exclusions. rufus unable to patch/setup files for boot