There appears to be a bug in 3.29/audio/control.c, lines 1050-1051. In avrcp_exit, the code removes the ct_record_id twice, and does nothing to remove the tg_record_id.