liveness: substitute bound regions with free ones before normalizing the return type Fixes #32323 r? @arielb1