[openEuler-5.10 227/557] smackfs: use __GFP_NOFAIL for smk_cipso_doi()