Comment 3 for bug 1642295

This seems to be a race between the call to destroy the model and the final clean-up of the controller, which sees the controller go before the other machines have completed.

Unlike other providers, the manual provider (understandably) has no final clean-up to terminate or shutdown instances.