Looks like missing clean up on error handling path.
->probe()
em28xx_init_dev()
em28xx_media_device_init() <- dev->media_dev allocated
*error somewhere in em28xx_init_dev()*
Hi Pavel,
you're right. In some error handling code (em28xx_audio_setup fails),
em28xx_init_dev fails to deallocated the media_dev field.