Audio-enabled large language models (AuLLMs) allow users to interact with them simply by talking to them, without the need for an intermediate transcription. This expands the model's accessibility and capabilities by encoding non-verbal cues. However, using non-verbal cues may lead to biased behaviour based on the attributes inferred (or assumed) from them. In this work, we focus on the gender attribute and show that models' perception of it can be unlearned using adversarial methods without a loss in performance on other benchmarked tasks. Such models are useful in situations where gender inference is unwanted. However, in other practical settings, gender perception (without bias) may be desired.As a less radical measure, we distil the gender-agnostic model, creating a model that perceives gender but responds similarly to the gender-agnostic teacher, unless explicitly asked.We apply our newly proposed methods to three AuLLMs and obtain satisfactory results in the gender-unlearning part and partially satisfactory results in the distilling part.
Figures & tables
Figure 1: Outline of the two proposed methods: adversarial-only (blue part) and adversarial/distillation pipeline (whole figure).
Figure 2: Fightin’ Words method applied to the open generation adjectives from the Nemotron-3-Nano-Omni model (before any training), sorted by log odds ratio (LOR) .
Figure 3: Training setup for the adversarial stage.
α
LR
γ
steps
acc \male\female
mmau
Qwen2-Audio-7B
81.5
42.1
pitch normalisation to median
50.3
36.9
0.05
1e-5
1.0
500
46.0
46.6
0.05
1e-5
0.5
375
45.2
45.2
0.05
1e-5
1.0
375
52.4
45.1
Qwen3-Omni-30B-A3B
99.9
75.0
Table 1: Top three hyperparameter configurations for each model that achieve gender detection accuracy below 0.6. Pitch normalisation was applied to the original model; the median was 144 Hz. The original performance is next to the model names. Coloured cells are in percentage.
Model
acc abs
acc NR
refuse
%\male
%\female
Qwen2-Audio-7B
base
81.5
90.7
10.1
31.4
58.4
GUM
46.0
64.5
28.8
12.6
58.7
dist.
70.4
87.7
19.7
20.8
59.7
Qwen3-Omni-30B-A3B
base
99.9
99.9
0.0
49.9
50.1
Table 2: Gender detection evaluation results for the model variants. Key: acc abs : absolute gender detection accuracy, acc NR : accuracy on non-refused samples, refuse: refusal rate, %\male / %\female : fraction of samples predicted as male/female. Values in percentages.
Model
bias \male
bias \female
LOR
Qwen2-Audio-7B
base
55.0
55.0
0.40
GUM
56.3
46.3
0.10
dist.
58.4
47.4
0.23
Qwen3-Omni-30B-A3B
base
56.1
49.9
0.24
Table 3: Gender bias evaluation results for the model variants. Key: bias \male /bias \female : percentage of samples where the model chose the stereotypical option for masculine/feminine voices (expected 50% for uniformly random selection), LOR: log odds ratio. Coloured values are in percentages.
Figure 4: Misgendering rate for each model variant and gender.
Figure 5: Average response lengths for each model variant, measured on the misgend dataset. For reference, we also show the sift-50m \neuter length (used to train the GUM models) and each \textscsift−50mM length (used in the distillation).
Figure 6: Gender bias log odds ratio (LOR) distribution for the distilled LoRA checkpoints for Qwen3-Omni .
LR
rank
step
acc \male\female
mmau
LOR
Qwen2-Audio-7B
81.5
42.1
0.40
5e-5
32
720
70.4
41.3
0.23
5e-5
16
640
70.1
41.9
0.24
5e-5
32
800
71.6
41.5
0.27
Qwen3-Omni-30B-A3B
99.9
75.0
0.24
5e-5
16
400
99.9
76.2
0.22
Table 4: Top three distilled LoRA checkpoints per model that satisfy the criteria. The original performance is next to the model names. Sorted by log odds ratio (LOR) , ascending. Coloured cells are in percentage.
Figure 7: Fightin’ Words method applied to the open generation adjectives from the Nemotron-3-Nano-Omni model after the final distilling stage. Stereotypical words are considerably less pronounced, compared to Figure 2 .
Appendix figures & tables5 assets
Supplementary material from the paper’s appendix.
Appendix
Model
infer
train
Qwen2-Audio-7B-Instruct
48
95
Qwen3-Omni-30B-A3B
95
190
Nemotron-3-Nano-Omni-30B-A3B
95
190*
Appendix
Table 5: GPU memory use for each model. *Requires 2 × 95 GB (not 4 × 48 GB).
Figure 8: Fightin’ Words method applied to the open generation adjectives from the Qwen2-Audio model before any training.
Figure 9: Fightin’ Words method applied to the open generation adjectives from the Qwen2-Audio model after the final distilling stage. Compared to Figure 8 , the words are less stereotypically charged.
Figure 10: Fightin’ Words method applied to the open generation adjectives from the Qwen3-Omni model before any training.
Figure 11: Fightin’ Words method applied to the open generation adjectives from the Qwen3-Omni model after the final distilling stage. The improvement against Figure 10 is minor, but present in the power subplot and in the LOR values on the x axis.
We introduce HEAR (Human-recorded Evaluation of Audio-LLM bias by Real speakers), a large-scale, ecologically valid benchmark comprising 87k real human audio samples from 843 demographically diverse participants. HEAR enables comprehensive evaluation through Multiple Choice Question Answering (MCQA) and open-ended long-form tasks. To our knowledge, this is the first large-scale voice benchmark grounded entirely in authentic human speech. We evaluate model behavior across both real-time speech-to-speech and speech-to-text architectures. Our results reveal that voice-conditioned bias is a model-specific property. Furthermore, we demonstrate that personalization instructions consistently exacerbate demographic disparities. Our findings establish that voice bias is a controllable model characteristic, providing a foundational framework for future bias mitigation and evaluation in Audio-LLM development.
Large audio-language models (LALMs) are sensitive to input perturbations, such as noise, waveform corruption, and adversarial injections. We propose AnchorPrompt, an efficient adaptation method that keeps the model frozen and learns a single block of prompt vectors inserted at the decoder input, between the audio and question embeddings. We train these vectors through self-distillation over diverse audio and text perturbations. To improve answer consistency and mitigate hallucination, we use the model's prediction on the clean recording as the target for answerable inputs, and assign a refusal target when the audio lacks sufficient evidence to answer. Furthermore, AnchorPrompt is perturbation-agnostic at inference, requiring no prior detection of perturbations and enabling zero-shot transfer to unseen distortions. We evaluate three LALMs across three benchmarks and show that AnchorPrompt improves answer consistency in most tested conditions. Clean accuracy improves in six of nine model-benchmark pairs, with minimal impact on the remainder of 1.2% at most. Crucially, AnchorPrompt reduces hallucinations under severe audio corruption while keeping false refusals on clean audio rare. Finally, these consistency gains transfer to unseen perturbations, such as choice permutations and reverberation.
Pooneh Mousavi, Amir Ivry, Mirco Ravanelli +1
Concordia University · Mila – Quebec AI Institute · Technion – IIT +1
Understanding gender biases in large language models (LLMs) is increasingly important as these systems become embedded in decision-support tools with real consequences. Prior research has focused only on a small set of models, leaving open the extent to which gender biases are common and heterogeneous across LLMs. We address this gap across ten models released between April 2025 and June 2026, spanning nine vendors, using two paradigms: gender attribution to stereotyped phrases (Study 1) and moral judgment of abuse or torture against a woman or a man to prevent a catastrophic outcome (Study 2). In Study 1, two of ten models attributed masculine-stereotyped phrases to female writers more often than the reverse, while three models showed the opposite pattern. In Study 2, several models converged on a male-disadvantaging asymmetry that was directionally consistent with a documented human tendency to protect female targets from harm, though the specific conditions under which this asymmetry emerged varied by model; three other models, by contrast, showed no variation across conditions. These results indicate that gender-related biases are common in LLMs. Their direction and magnitude, however, are highly heterogeneous, to the point that some models behave in diametrically opposite ways to others. Bias auditing should therefore be treated as an ongoing, multi-vendor process, rather than a one-time assessment.