https://source.android.com/docs/core/tests/debug/native-crash says: "You can reproduce an instance of this type of crash using crasher strlen-NULL."
How to do that actually? Open a "adb shell" to the Android emulator. next? crasher is part of debuggerd, but the only help debuggerd shows is:
127|x1s:/ $ debuggerd --help
usage: debuggerd [-bj] PID
-b, --backtrace just a backtrace rather than a full tombstone
-j collect java traces
1|x1s:/ $ crasher --help
/system/bin/sh: crasher: inaccessible or not found
BR, Rene