> Still, not calling shutdown() still seems essential to me, so I'd
> appreciate comments about the patch still.

Another option which I discarded but maybe favored is to introduce

__mbox_free_channel(struct mbox_chan *chan, bool do_shutdown)

When startup() fails, it is called with 'false'. mbox_free_channel wraps
it with 'true'.