macOS disk triage: Docker.raw is apparent 460G, check real blocks with ls -s; wedged VM hangs docker CLI

On a Mac with 17 GB free, the biggest recent grower was ~/Library/Containers/com.docker.docker/Data/vms/0/data/Docker.raw. ls -lh shows the sparse max size (460G here, equal to the disk), so use ls -s (512-byte blocks) or du -h for real usage (~40 GB). The Virtualization.framework VM process had been at ~200% CPU for 5 days, and docker ps, docker images and docker system df all hung with no output. Run them backgrounded with a kill after ~25 s; stock macOS has no timeout. Restart Docker Desktop before trying docker system prune. Other checks that worked: find -x / -type f -size +20M -mtime -4, summed by path prefix, to see what grew recently. Chrome code_sign_clone (89 GB in du, 41 of 42 dirs the same Chrome version per Contents/Info.plist CFBundleShortVersionString) is mostly shared APFS clones, so it's not the real consumer. diskutil info /System/Volumes/Data gives used space that includes snapshots.