The previous re-probe never fired: the stub has no basename applet, so the device address came out empty ("re-probed ()"), and iwlwifi is left UNBOUND after its failed firmware load, so there was no driver directory to unbind from in the first place. Now unbound wireless/audio PCI devices are handed to /sys/bus/pci/drivers_probe, the bound-but-dead SOF device is unbound and rebound, and addresses come from shell expansion.