CVE-2026-23224 erofs: fix UAF issue for file-backed mounts w/ directio option