Nondeterministic segfault in nested containers.

### Description

While running programs written in [docker-lisp](https://github.com/a11ce/docker-lisp), containers occasionally segfault.

### Version

```
colima version 0.9.1
git commit: 0cbf719f5409ce04b9f0607b681c005d2ff7d94a

runtime: docker
arch: aarch64
client: v29.2.1
server: v28.4.0
limactl version 2.0.3
```
I don't have qemu-img.

### Operating System

- [ ] macOS Intel <= 13 (Ventura)
- [ ] macOS Intel >= 14 (Sonoma)
- [ ] Apple Silicon <= 13 (Ventura)
- [x] Apple Silicon >= 14 (Sonoma)
- [ ] Linux

### Output of `colima status`

```
INFO[0000] colima is running using macOS Virtualization.Framework
INFO[0000] arch: aarch64
INFO[0000] runtime: docker
INFO[0000] mountType: virtiofs
INFO[0000] docker socket: unix:///Users/a11ce/.colima/default/docker.sock
INFO[0000] containerd socket: unix:///Users/a11ce/.colima/default/containerd.sock
```

### Reproduction Steps

0. Start colima
1. `git@github.com:a11ce/docker-lisp.git` and `cd docker-lisp`
2. `./scripts/build-builtins`
3. `./scripts/build programs/factorial`
4. `./scripts/run --trace factorial`
5. Observe `Segmentation fault (core dumped)` during the execution of factorial. If factorial completes successfully, run it again (it happens roughly 1/3 of runs on my machine).

### Expected behaviour

I expect to compute the factorial of 6.

### Additional context

_No response_