docs: add a new GSoC idea for advanced Fuzzing and image injection

Signed-off-by: Gao Xiang <hsiangkao@linux.alibaba.com>

Author: hsiangkao

src/gsoc.md

@@ -142,7 +142,7 @@ Skills:
 Proposed mentors: Gao Xiang, Hongbo Li ([@hb-lee](https://github.com/hb-lee))  
 Languages: C  
 Estimated project length: 350 hours  
-Difficulty: medium  
+Difficulty: hard  
 Skills:  
  - Proficiency in C programming;
  - Experience with file system concepts and operations.
@@ -178,3 +178,39 @@ Key objectives:
  - Integrate EROFS with FreeBSD’s VFS, buffer cache, and VM systems;
  - Validate correctness and performance using real-world workloads;
  - Lay groundwork for future BSD ports (OpenBSD, NetBSD).
+
+### Advanced Fuzzing and image injection for the kernel and erofs-utils
+
+Proposed mentors: Gao Xiang, XXX
+Languages: C  
+Estimated project length: 175 hours  
+Difficulty: medium  
+Skills:  
+ - Proficiency in C programming;
+ - Experience with file system concepts and operations;
+ - Familiarity with fuzzing frameworks (e.g., AFL++, libFuzzer) is a plus.
+
+**Description**
+
+EROFS aims to be a secure, immutable image-based kernel filesystem by design.
+Since its on-disk format contains less redundant metadata and is designed to
+tolerate any bogus or corrupted values, unlike generic writable filesystems,
+and due to its immutable characteristic, all writable data is copied up (aka.
+copy-on-write) into another local trusted filesystem.  This makes it safer than
+writing directly to an untrusted and potentially inconsistent generic writable
+filesystem.
+
+We pay particular attention to the EROFS core on-disk format. Although the
+format design is simple and the implementation (especially for the core format)
+is straightforward, it is highly beneficial to develop more advanced tools
+alongside the current syzkaller and the existing erofs-utils fuzzer. These tools
+will keep the codebase robust and allow us to address random human-introduced
+bugs more actively and in time.
+
+The main goal is to implement an advanced fuzzing tool and an image injection
+tool (maybe it is easier to be implemented with go-erofs or erofs-rs for
+example), and we intend to enable a new GitHub Actions CI workflow to perform
+periodic fuzzing.
+
+This will allow us to maintain the kernel and erofs-utils implementations in
+better shape.