O_PATH: allow vfs_extattr syscalls
(cherry picked from commit 98dae405de7f8b3506dd94dcd3e9f51d3fb15962)