Android (Adreno618) crashes When both HDR and MSAA are enabled in URP

I used GPU skin animation in my Android game, with both HDR and MSAA (2x/4x/8x) enabled on URP pipeline asset, crashes intermittently on Qualcomm Adreno618/619 display chips, and everything is normal on other non Qualcomm chips. If I close either MSAA or HDR, the crash will never occur again. How can I continue to investigate the underlying cause of this issue. The following is the crash log, and I have noticed that there are always several repeated Adreno GSL warnings before the crash:

0001/01/01 00:00:00.000 -1 -1 Info --------- beginning of main
2024/05/08 16:34:47.958 23673 23673 Verbose AutofillManager requestHideFillUi(null): anchor = null
2024/05/08 16:34:48.142 23673 23732 Debug Unity Requested framebuffer: resolution[1080x2400], rgba[8/8/8/8], depth+stencil[on], samples[4]
2024/05/08 16:34:48.142 23673 23732 Debug Unity Created framebuffer: resolution[1080x2400], rgba[8/8/8/8], depth+stencil[24/8], samples[4] (MSAA)
2024/05/08 16:34:48.716 23673 23732 Warn Adreno-GSL <gsl_ldd_control:553>: ioctl fd 118 code 0xc040094a (IOCTL_KGSL_GPU_COMMAND) failed: errno 71 Protocol error
2024/05/08 16:34:48.716 23673 23732 Warn Adreno-GSL <log_gpu_snapshot:462>: panel.gpuSnapshotPath is not set.not generating user snapshot
2024/05/08 16:34:49.214 23673 23732 Warn Adreno-GSL <gsl_ldd_control:553>: ioctl fd 118 code 0xc040094a (IOCTL_KGSL_GPU_COMMAND) failed: errno 71 Protocol error
2024/05/08 16:34:49.214 23673 23732 Warn Adreno-GSL <log_gpu_snapshot:462>: panel.gpuSnapshotPath is not set.not generating user snapshot
2024/05/08 16:34:49.911 23673 23732 Warn Adreno-GSL <gsl_ldd_control:553>: ioctl fd 118 code 0xc040094a (IOCTL_KGSL_GPU_COMMAND) failed: errno 71 Protocol error
2024/05/08 16:34:49.912 23673 23732 Warn Adreno-GSL <log_gpu_snapshot:462>: panel.gpuSnapshotPath is not set.not generating user snapshot
2024/05/08 16:34:50.415 23673 23732 Warn Adreno-GSL <gsl_ldd_control:553>: ioctl fd 118 code 0xc040094a (IOCTL_KGSL_GPU_COMMAND) failed: errno 35 Resource deadlock would occur
2024/05/08 16:34:50.415 23673 23732 Warn Adreno-GSL <log_gpu_snapshot:462>: panel.gpuSnapshotPath is not set.not generating user snapshot
2024/05/08 16:34:50.484 23673 23732 Error CRASH *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
2024/05/08 16:34:50.484 23673 23732 Error CRASH Version '2022.3.20f1c1 (82a5dab7aa2a)', Build type 'Development', Scripting Backend 'il2cpp', CPU 'arm64-v8a'
2024/05/08 16:34:50.484 23673 23732 Error CRASH Build fingerprint: 'OPPO/CPH2159/OP4F25L1:12/SKQ1.210216.001/R.ec6259-1_1:user/release-keys'
2024/05/08 16:34:50.484 23673 23732 Error CRASH Revision: '0'
2024/05/08 16:34:50.484 23673 23732 Error CRASH ABI: 'arm64'
2024/05/08 16:34:50.484 23673 23732 Error CRASH Timestamp: 2024-05-08 16:34:50.484323259+0800
2024/05/08 16:34:50.484 23673 23732 Error CRASH pid: 23673, tid: 23732, name: UnityGfxDeviceW >>> com.crash.test <<<
2024/05/08 16:34:50.484 23673 23732 Error CRASH uid: 10284
2024/05/08 16:34:50.484 23673 23732 Error CRASH signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr --------
2024/05/08 16:34:50.484 23673 23732 Error CRASH Cause: null pointer dereference
2024/05/08 16:34:50.484 23673 23732 Error CRASH x0 0000000000000000 x1 0000007bc01a7e90 x2 0000000000000020 x3 00000000000002b0
2024/05/08 16:34:50.484 23673 23732 Error CRASH x4 0000000000000000 x5 0000007d29a36908 x6 ffffffffffffffe0 x7 0000007bc01a7f68
2024/05/08 16:34:50.484 23673 23732 Error CRASH x8 00000000000000a0 x9 0000000000000001 x10 0000007cd38b5510 x11 0000000000001190
2024/05/08 16:34:50.484 23673 23732 Error CRASH x12 0000000000000001 x13 0000007bd00001c8 x14 0000000000008006 x15 0000000000008006
2024/05/08 16:34:50.484 23673 23732 Error CRASH x16 0000007cd5988da0 x17 0000007df22b6940 x18 0000007beb1c2000 x19 0000000000000020
2024/05/08 16:34:50.484 23673 23732 Error CRASH x20 0000007c819f03c0 x21 000000000000000a x22 0000007bc01a7e70 x23 0000000000000000
2024/05/08 16:34:50.484 23673 23732 Error CRASH x24 00000000000002b0 x25 b400007cb3f4ed00 x26 0000007c811b0240 x27 0000007c9025e120
2024/05/08 16:34:50.484 23673 23732 Error CRASH x28 0000007bec315950 x29 00000000000000a0
2024/05/08 16:34:50.484 23673 23732 Error CRASH lr 0000007cd4e50dd0 sp 0000007bec315690 pc 0000007df22b6a4c pst 0000000020001000
2024/05/08 16:34:50.484 23673 23732 Error CRASH backtrace:
2024/05/08 16:34:50.484 23673 23732 Error CRASH #00 pc 0000000000075a4c /apex/com.android.runtime/lib64/bionic/libc.so (memcpy_opt+268) (BuildId: bbbdeb7c87c74f1491f92c6e605095b0)
2024/05/08 16:34:50.484 23673 23732 Error CRASH #01 pc 00000000019d1dcc /data/app/~~pkxBVlB6MaBYtv_YDmwuUg==/com.crash.test-jdKYsQKR3V4wNnHifG6IRg==/lib/arm64/libunity.so (GfxDeviceGLES::smile:rawBuffersBatchMode(GfxBatchHeader const&)+188) (BuildId: 67c9081ae50a03628c8727ce1e49648b636fe54e)
2024/05/08 16:34:50.484 23673 23732 Error CRASH #02 pc 0000000001be4700 /data/app/~~pkxBVlB6MaBYtv_YDmwuUg==/com.crash.test-jdKYsQKR3V4wNnHifG6IRg==/lib/arm64/libunity.so (GfxDeviceWorker::RunCommand(ThreadedStreamBuffer&)+27164) (BuildId: 67c9081ae50a03628c8727ce1e49648b636fe54e)
2024/05/08 16:34:50.484 23673 23732 Error CRASH #03 pc 0000000001bddc7c /data/app/~~pkxBVlB6MaBYtv_YDmwuUg==/com.crash.test-jdKYsQKR3V4wNnHifG6IRg==/lib/arm64/libunity.so (GfxDeviceWorker::RunExt(ThreadedStreamBuffer&)+84) (BuildId: 67c9081ae50a03628c8727ce1e49648b636fe54e)
2024/05/08 16:34:50.484 23673 23732 Error CRASH #04 pc 0000000001bddc1c /data/app/~~pkxBVlB6MaBYtv_YDmwuUg==/com.crash.test-jdKYsQKR3V4wNnHifG6IRg==/lib/arm64/libunity.so (GfxDeviceWorker::Run()+140) (BuildId: 67c9081ae50a03628c8727ce1e49648b636fe54e)
2024/05/08 16:34:50.484 23673 23732 Error CRASH #05 pc 0000000001bdd9a0 /data/app/~~pkxBVlB6MaBYtv_YDmwuUg==/com.crash.test-jdKYsQKR3V4wNnHifG6IRg==/lib/arm64/libunity.so (GfxDeviceWorker::RunGfxDeviceWorker(void*)+4) (BuildId: 67c9081ae50a03628c8727ce1e49648b636fe54e)
2024/05/08 16:34:50.484 23673 23732 Error CRASH #06 pc 00000000010d7990 /data/app/~~pkxBVlB6MaBYtv_YDmwuUg==/com.crash.test-jdKYsQKR3V4wNnHifG6IRg==/lib/arm64/libunity.so (Thread::RunThreadWrapper(void*)+1048) (BuildId: 67c9081ae50a03628c8727ce1e49648b636fe54e)
2024/05/08 16:34:50.484 23673 23732 Error CRASH #07 pc 00000000000deb44 /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+264) (BuildId: bbbdeb7c87c74f1491f92c6e605095b0)
2024/05/08 16:34:50.484 23673 23732 Error CRASH #08 pc 000000000007b2fc /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+68) (BuildId: bbbdeb7c87c74f1491f92c6e605095b0)
2024/05/08 16:34:50.723 23673 23732 Error CRASH Forwarding signal 11
0001/01/01 00:00:00.000 -1 -1 Info --------- beginning of crash
2024/05/08 16:34:50.723 23673 23732 Fatal libc Fatal signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0 in tid 23732 (UnityGfxDeviceW), pid 23673 (com.crash.test)

  1. update unity if possible
  2. Maybe change the urp renderer settings for depth priming and depth texture?
  3. If it happens on the latest unity versions, file a bug report