Mark R,
re your 2 ports in the netstat problem , we encountered similar issues running through a VPN where the VPN middleware apparently collapsed the tunnel because a keepalive parameter was not properly set.
We also found that in some circumstances the “zombie” port would not go away until the process controlling the thread was hcienginestopped. Simply doing an hcicmd “pstop” on the thread wouldn’t release the hung port.