Ah, never mind. This was a stupid question.
In short-duration traffic land, most calls end with all branches failing. I didn't have rtpengine_delete() cleanups in the failure_route[] for that scenario.
The volume of calls is far too large for rtpengine's own RTP timeout ("garbage collector") to release the ports fast enough.
False alarm, and apologies for wasting time.
-- Alex