I'm stupid.
FAULT DISCOVERED!
The CHANGE node!
I set the msg.payload before I set the msg.device.
So when I look to set the msg.device (second change), there is nothing there because I just changed the msg.payload.
Be this a lesson for new people.
If messing around with the CHANGE node:
Modify the msg.payload LAST!