Never run filesystem utilities on (or worse: mount) VM filesystems in dom0. The filesystem on-disk format itself, and not just the files stored in it, is a complex data structure that’s fully controlled by the VM, so it’s best treated as potentially malicious. Filesystem utilities (or kernel filesystem code) can’t be assumed to be robust against this.