Low: controller: avoid memory leak if start-up fails

Unlikely scenario but is safer