The tearDownPort path, exercised for the first time with a real removal and return: QEMU raises no root-port change events, so the bus's 250 ms reconcile tick notices the PORTSC change alone — and it does. Reap, re-add, rebind, second generation binds on the same port. Discrimination: against the pre-reap manager (4a2df58~1) the case fails at the dedupe wall.