Updating Unity 2022 to Unity 6 caused a spike in libunity.so tlsf_free crashes in Firebase Crashlytics

Hello everyone!

After updating Unity from version 2022 to Unity 6, we began experiencing a significant spike in crashes reported by Firebase Crashlytics. The number of crash-free users dropped from 99.5% to 97%. We cannot reproduce these crashes locally.

All crashes are caused by memory allocation/deallocation inside Unity systems and are related to libunity.so tlsf_free. I’ve attached tombstones below.

What we know so far:

  1. The issue affects all Unity Engine systems (Animator, Physics, Particles, Rendering, etc.).
  2. It appears to be related to internal memory allocation and release.
  3. Most crashes occur during gameplay, especially when instantiating poolable objects.
  4. It does not seem to be RAM-related.
  5. The issue primarily affects Android devices.

Has anyone else experienced or resolved a similar problem after upgrading a production app?

Thanks in advance for any help!

Tombstones example 1:

          : null pointer dereference
#00 pc 0x1198ce4 (tlsf_remove_pool [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#01 pc 0x1198e80 (tlsf_destroy [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#02 pc 0x1199004 (tlsf_memalign [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#03 pc 0x61e664 (DynamicHeapAllocator::Allocate(unsigned long, int) [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#04 pc 0x62143c (MemoryManager::Allocate(unsigned long, unsigned long, MemLabelId, AllocateOptions, char const*, int) [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#05 pc 0x10fd388 (mecanim::animation::CreateControllerInput(mecanim::animation::ControllerConstant const*, RuntimeBaseAllocator&) [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#06 pc 0xa0b224 (AnimatorControllerPlayable::GenerateGraph() [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#07 pc 0xa0a9b8 (AnimatorControllerPlayable::SetAnimatorController(RuntimeAnimatorController*) [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#08 pc 0x9e1314 (Animator::CreateInternalControllerPlayable() [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#09 pc 0x9e4b00 (Animator::AddToManager() [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#10 pc 0x9d93a4 (Animator::AwakeFromLoad(AwakeFromLoadMode) [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#11 pc 0x8b8d68 (AwakeFromLoadQueue::InvokeAwakeFromLoad(AwakeFromLoadQueue::Item*, unsigned int, AwakeFromLoadMode) [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#12 pc 0x8b8bdc (AwakeFromLoadQueue::AwakeFromLoadAllQueues(AwakeFromLoadMode, bool) [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#13 pc 0x6344e0 (GameObject::ActivateAwakeRecursively(DeactivateOperation) [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#14 pc 0x520dca4 (EnemyPresenter_Setup_m3E5A4F967B3C6CBDE6AEF0D8CAE3EDE06ABDA8E6 [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#15 pc 0x5222260 (EnemySpawner_SpawnEnemy_mB8155048C246E14809797FCBF0140600D6AFCA07 [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#16 pc 0x5225230 (U3CSpawnSubWaveU3Ed__67_MoveNext_m1830BE97A43E688996D6AE883B42680FCCE1414E [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#17 pc 0x52218e4 (EnemySpawner_SpawnSubWave_m98F130F1F70DF65E7470A5248B1E9047416649AB [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#18 pc 0x52215d8 (EnemySpawner_HandleEnemySubWaves_m2A5B6580D4DB9F9740F83720B312F97D9278F9B4 [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#19 pc 0x6c91734 (ReactiveProperty_1_set_Value_mE2471A816A3C34A02E109ADABD25D4BE74EB5F6D_gshared [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#20 pc 0x5120a60 (LevelModel_OnUpdate_m3AF88BF09810291A41D707061C842FE28D356A3A [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#21 pc 0x7079be8 (Subscribe_1_OnNext_mC23F5C253D3B49CE72005053D33B9EC13E58C95B_gshared [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#22 pc 0x6ef96d8 (Skip_OnNext_mFE38ADFECAAD136C44077C6156E68B57E6029A23_gshared [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#23 pc 0x6b0ee7c (ObserverNode_1_OnNext_m17DE5E58403E84B558B11216C6626E580A5C125B_gshared [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#24 pc 0x6c92060 (ReactiveProperty_1_RaiseOnNext_mE522F86197676A47A94E89B2D3CD35FFB07DBD57_gshared [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#25 pc 0x6c920e8 (ReactiveProperty_1_SetValueAndForceNotify_mCEE575EA9FE05627ADDDCDB61CABC592C835D37D_gshared [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#26 pc 0x5448a64 (TimeProvider_Frameworks_Time_ITimeUpdater_Update_m09A0CEB78CF50CEEBA96D0EADB9B08123AEA0D2A [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#27 pc 0x452e010 (Dispatcher_NotifyUpdate_mC37BA4BC37B46E735C6DF6F206B6218D8AA0499D [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#28 pc 0x64b4988 (ListObserver_1_OnNext_m76ECE7124ED97098F5400845DE283AB1BB944286_gshared [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#29 pc 0x8e259d4 (MainThreadDispatcher_Update_mCF5B649B29EB4B1D0229336170C041BE0BD8B53C [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#30 pc 0x4342cf4 (il2cpp::vm::Runtime::InvokeWithThrow(MethodInfo const*, void*, void**) [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#31 pc 0x4342c38 (il2cpp::vm::Runtime::Invoke(MethodInfo const*, void*, void**, Il2CppException**) [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#32 pc 0x854d54 (scripting_method_invoke(ScriptingMethodPtr, ScriptingObjectPtr, ScriptingArguments&, ScriptingExceptionPtr*, bool) [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#33 pc 0x869bc0 (ScriptingInvocation::Invoke(ScriptingExceptionPtr*, bool) [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#34 pc 0x875ae4 (MonoBehaviour::CallUpdateMethod(int) [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#35 pc 0x659320 (void BaseBehaviourManager::CommonUpdate<BehaviourManager>() [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#36 pc 0x743780 (ExecutePlayerLoop(NativePlayerLoopSystem*) [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#37 pc 0x7437c0 (ExecutePlayerLoop(NativePlayerLoopSystem*) [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#38 pc 0x743a8c (PlayerLoop() [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#39 pc 0x90717c (UnityPlayerLoop() [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#40 pc 0x908340 (nativeRender(_JNIEnv*, _jobject*) [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#41 pc 0xf4d160 (art_jni_trampoline [/data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat])
#42 pc 0x2d8d40 (com.unity3d.player.E0.handleMessage [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/oat/arm64/base.odex])
#43 pc 0x9a9dec (android.os.Handler.dispatchMessage [/data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat])
#44 pc 0x9ad9d0 (android.os.Looper.loopOnce [/data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat])
#45 pc 0x9ad528 (android.os.Looper.loop [/data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat])
#46 pc 0x2814f4 (com.unity3d.player.G0.run [/data/app/~~KVTL49kima0C6M69w6O2Gg==/com.thegame-HI110e1bHWfRjcEbhRrDlg==/oat/arm64/base.odex])
#47 pc 0x32d194 (art_quick_invoke_stub [/apex/com.android.art/lib64/libart.so]) (BuildId: 80d2ab18f9d259d8e546c1e6bae752b1)
#48 pc 0x2de270 (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*) [/apex/com.android.art/lib64/libart.so]) (BuildId: 80d2ab18f9d259d8e546c1e6bae752b1)
#49 pc 0x4bfcf4 (art::Thread::CreateCallback(void*) [/apex/com.android.art/lib64/libart.so]) (BuildId: 80d2ab18f9d259d8e546c1e6bae752b1)
#50 pc 0x4bf940 (art::Thread::CreateCallbackWithUffdGc(void*) [/apex/com.android.art/lib64/libart.so]) (BuildId: 80d2ab18f9d259d8e546c1e6bae752b1)
#51 pc 0xc9cfc (__pthread_start(void*) [/apex/com.android.runtime/lib64/bionic/libc.so]) (BuildId: e2d9c5ba32145bb6e11e59494ee68593)
#52 pc 0x5db00 (__start_thread [/apex/com.android.runtime/lib64/bionic/libc.so]) (BuildId: e2d9c5ba32145bb6e11e59494ee68593)

Tombstones example 2:

          : null pointer dereference
#00 pc 0x105f33c (ParticleSystem::SyncRenderJobs() [/data/app/~~Th0zG-_05R_S76G97unFvw==/com.thegame-MFqgfHrJt7pcsLfRdLskuA==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#01 pc 0x10661f0 (ParticleSystem::BeginUpdate(ParticleSystem**, unsigned long, float, float) [/data/app/~~Th0zG-_05R_S76G97unFvw==/com.thegame-MFqgfHrJt7pcsLfRdLskuA==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#02 pc 0x105c478 (ParticleSystem::BeginUpdateAll() [/data/app/~~Th0zG-_05R_S76G97unFvw==/com.thegame-MFqgfHrJt7pcsLfRdLskuA==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#03 pc 0x743780 (ExecutePlayerLoop(NativePlayerLoopSystem*) [/data/app/~~Th0zG-_05R_S76G97unFvw==/com.thegame-MFqgfHrJt7pcsLfRdLskuA==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#04 pc 0x7437c0 (ExecutePlayerLoop(NativePlayerLoopSystem*) [/data/app/~~Th0zG-_05R_S76G97unFvw==/com.thegame-MFqgfHrJt7pcsLfRdLskuA==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#05 pc 0x743a8c (PlayerLoop() [/data/app/~~Th0zG-_05R_S76G97unFvw==/com.thegame-MFqgfHrJt7pcsLfRdLskuA==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#06 pc 0x90717c (UnityPlayerLoop() [/data/app/~~Th0zG-_05R_S76G97unFvw==/com.thegame-MFqgfHrJt7pcsLfRdLskuA==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#07 pc 0x908340 (nativeRender(_JNIEnv*, _jobject*) [/data/app/~~Th0zG-_05R_S76G97unFvw==/com.thegame-MFqgfHrJt7pcsLfRdLskuA==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#08 pc 0xde7630 (art_jni_trampoline [/data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat])
#09 pc 0x1b7c78 (com.unity3d.player.E0.handleMessage [/data/dalvik-cache/arm64/data@app@~~Th0zG-_05R_S76G97unFvw==@com.thegame-MFqgfHrJt7pcsLfRdLskuA==@base.apk@classes.dex])
#10 pc 0x9aa50c (android.os.Handler.dispatchMessage [/data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat])
#11 pc 0x9add80 (android.os.Looper.loopOnce [/data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat])
#12 pc 0x9ad838 (android.os.Looper.loop [/data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat])
#13 pc 0x24f46c (com.unity3d.player.G0.run [/data/dalvik-cache/arm64/data@app@~~Th0zG-_05R_S76G97unFvw==@com.thegame-MFqgfHrJt7pcsLfRdLskuA==@base.apk@classes.dex])
#14 pc 0x32d194 (art_quick_invoke_stub [/apex/com.android.art/lib64/libart.so]) (BuildId: 80d2ab18f9d259d8e546c1e6bae752b1)
#15 pc 0x2de270 (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*) [/apex/com.android.art/lib64/libart.so]) (BuildId: 80d2ab18f9d259d8e546c1e6bae752b1)
#16 pc 0x4bfcf4 (art::Thread::CreateCallback(void*) [/apex/com.android.art/lib64/libart.so]) (BuildId: 80d2ab18f9d259d8e546c1e6bae752b1)
#17 pc 0xba7b8 (__pthread_start(void*) [/apex/com.android.runtime/lib64/bionic/libc.so]) (BuildId: 768cf6eda02231c8d6461c7dc95f23d4)
#18 pc 0x54160 (__start_thread [/apex/com.android.runtime/lib64/bionic/libc.so]) (BuildId: 768cf6eda02231c8d6461c7dc95f23d4)

Tombstone example 3:

          :
#00 pc 0x11990f8 (tlsf_free [/data/app/~~8JBk6EOD6TNmXYrBENGMRQ==/com.thegame-87XvUmoNUgbiV8qHmTmiig==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#01 pc 0x62060c (DynamicHeapAllocator::Deallocate(void*) [/data/app/~~8JBk6EOD6TNmXYrBENGMRQ==/com.thegame-87XvUmoNUgbiV8qHmTmiig==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#02 pc 0x61e1d8 (DelayedPointerDeletionManager::CleanupPendingMainThreadPointersInternal() [/data/app/~~8JBk6EOD6TNmXYrBENGMRQ==/com.thegame-87XvUmoNUgbiV8qHmTmiig==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#03 pc 0x61e188 (DelayedPointerDeletionManager::CleanupPendingMainThreadPointers() [/data/app/~~8JBk6EOD6TNmXYrBENGMRQ==/com.thegame-87XvUmoNUgbiV8qHmTmiig==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#04 pc 0x61e424 (DualThreadAllocator<DynamicHeapAllocator>::Allocate(unsigned long, int) [/data/app/~~8JBk6EOD6TNmXYrBENGMRQ==/com.thegame-87XvUmoNUgbiV8qHmTmiig==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#05 pc 0x62143c (MemoryManager::Allocate(unsigned long, unsigned long, MemLabelId, AllocateOptions, char const*, int) [/data/app/~~8JBk6EOD6TNmXYrBENGMRQ==/com.thegame-87XvUmoNUgbiV8qHmTmiig==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#06 pc 0x10662c0 (ParticleSystem::BeginUpdate(ParticleSystem**, unsigned long, float, float) [/data/app/~~8JBk6EOD6TNmXYrBENGMRQ==/com.thegame-87XvUmoNUgbiV8qHmTmiig==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#07 pc 0x105c478 (ParticleSystem::BeginUpdateAll() [/data/app/~~8JBk6EOD6TNmXYrBENGMRQ==/com.thegame-87XvUmoNUgbiV8qHmTmiig==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#08 pc 0x743780 (ExecutePlayerLoop(NativePlayerLoopSystem*) [/data/app/~~8JBk6EOD6TNmXYrBENGMRQ==/com.thegame-87XvUmoNUgbiV8qHmTmiig==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#09 pc 0x7437c0 (ExecutePlayerLoop(NativePlayerLoopSystem*) [/data/app/~~8JBk6EOD6TNmXYrBENGMRQ==/com.thegame-87XvUmoNUgbiV8qHmTmiig==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#10 pc 0x743a8c (PlayerLoop() [/data/app/~~8JBk6EOD6TNmXYrBENGMRQ==/com.thegame-87XvUmoNUgbiV8qHmTmiig==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#11 pc 0x90717c (UnityPlayerLoop() [/data/app/~~8JBk6EOD6TNmXYrBENGMRQ==/com.thegame-87XvUmoNUgbiV8qHmTmiig==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#12 pc 0x908340 (nativeRender(_JNIEnv*, _jobject*) [/data/app/~~8JBk6EOD6TNmXYrBENGMRQ==/com.thegame-87XvUmoNUgbiV8qHmTmiig==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#13 pc 0x31a5d0 (art_jni_trampoline [/data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat])
#14 pc 0x51f800 (com.unity3d.player.E0.handleMessage [/data/app/~~8JBk6EOD6TNmXYrBENGMRQ==/com.thegame-87XvUmoNUgbiV8qHmTmiig==/oat/arm64/base.odex])
#15 pc 0x948cec (android.os.Handler.dispatchMessage [/data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat])
#16 pc 0x94ca30 (android.os.Looper.loopOnce [/data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat])
#17 pc 0x94c458 (android.os.Looper.loop [/data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat])
#18 pc 0x4c7e08 (com.unity3d.player.G0.run [/data/app/~~8JBk6EOD6TNmXYrBENGMRQ==/com.thegame-87XvUmoNUgbiV8qHmTmiig==/oat/arm64/base.odex])
#19 pc 0x368774 (art_quick_invoke_stub [/apex/com.android.art/lib64/libart.so]) (BuildId: 4ccb65ae9ac5ad5da3af5a342d5b0b92)
#20 pc 0x353f24 (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*) [/apex/com.android.art/lib64/libart.so]) (BuildId: 4ccb65ae9ac5ad5da3af5a342d5b0b92)
#21 pc 0x947748 (art::detail::ShortyTraits<(char)86>::Type art::ArtMethod::InvokeInstance<(char)86>(art::Thread*, art::ObjPtr<art::mirror::Object>, art::detail::ShortyTraits<>::Type...) [/apex/com.android.art/lib64/libart.so]) (BuildId: 4ccb65ae9ac5ad5da3af5a342d5b0b92)
#22 pc 0x636e80 (art::Thread::CreateCallback(void*) [/apex/com.android.art/lib64/libart.so]) (BuildId: 4ccb65ae9ac5ad5da3af5a342d5b0b92)
#23 pc 0x636930 (art::Thread::CreateCallbackWithUffdGc(void*) [/apex/com.android.art/lib64/libart.so]) (BuildId: 4ccb65ae9ac5ad5da3af5a342d5b0b92)
#24 pc 0x71b3c (__pthread_start(void*) [/apex/com.android.runtime/lib64/bionic/libc.so]) (BuildId: f98650a65aa2ec2d87236752af90aa7e)
#25 pc 0x63c38 (__start_thread [/apex/com.android.runtime/lib64/bionic/libc.so]) (BuildId: f98650a65aa2ec2d87236752af90aa7e)
        

Tombstone example 4:

          :
#00 pc 0x11990f8 (tlsf_free [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#01 pc 0x62060c (DynamicHeapAllocator::Deallocate(void*) [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#02 pc 0x61e1d8 (DelayedPointerDeletionManager::CleanupPendingMainThreadPointersInternal() [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#03 pc 0x61e188 (DelayedPointerDeletionManager::CleanupPendingMainThreadPointers() [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#04 pc 0x61e424 (DualThreadAllocator<DynamicHeapAllocator>::Allocate(unsigned long, int) [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#05 pc 0x62143c (MemoryManager::Allocate(unsigned long, unsigned long, MemLabelId, AllocateOptions, char const*, int) [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#06 pc 0xc23a20 (Box2D::b2BlockAllocator::Initialize(MemLabelId) [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#07 pc 0xbf7824 (Cast2DQueryBase::Cast2DQueryBase(PhysicsScene2D*, Vector2f const&, Vector2f const&, float, ContactFilter const&, Collider2D const*, bool, core::vector<RaycastHit2D, core::allocator<RaycastHit2D, 0ul>>&) [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#08 pc 0xbf1ea4 (PhysicsQuery2D::CircleCast(PhysicsScene2D*, Vector2f const&, float, Vector2f const&, float, ContactFilter const&, Collider2D const*, bool, RaycastHit2D*, int) [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#09 pc 0xbf2374 (PhysicsQuery2D::CircleCastArray_Binding(int, Vector2f const&, float, Vector2f const&, float, ContactFilter const&, core::array_ref_writable<RaycastHit2D>) [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#10 pc 0x5ebdbc (PhysicsScene2D_CUSTOM_CircleCastArray_Internal(int const&, Vector2f const&, float, Vector2f const&, float, ContactFilter const&, BindingsManagedSpan*) [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#11 pc 0x9327768 (PhysicsScene2D_CircleCastArray_Internal_m9FA36371B16E19AA93558D7F69D5D4F6FD421F5F [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#12 pc 0x932983c (Physics2D_CircleCastNonAlloc_m321FFCBE4F317839050AD7DB6654EFDF4320673B [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#13 pc 0x4f6e164 (DualPistolsProjectileView_FixedUpdate_mD04330A251746113B87BD61D05262721FC3E664B [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#14 pc 0x4342cf4 (il2cpp::vm::Runtime::InvokeWithThrow(MethodInfo const*, void*, void**) [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#15 pc 0x4342c38 (il2cpp::vm::Runtime::Invoke(MethodInfo const*, void*, void**, Il2CppException**) [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libil2cpp.so]) (BuildId: 8e4cf39c423a981dfd9ce09b90fdb8b88315802f)
#16 pc 0x854d54 (scripting_method_invoke(ScriptingMethodPtr, ScriptingObjectPtr, ScriptingArguments&, ScriptingExceptionPtr*, bool) [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#17 pc 0x869bc0 (ScriptingInvocation::Invoke(ScriptingExceptionPtr*, bool) [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#18 pc 0x875ae4 (MonoBehaviour::CallUpdateMethod(int) [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#19 pc 0x65951c (void BaseBehaviourManager::CommonUpdate<FixedBehaviourManager>() [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#20 pc 0x743780 (ExecutePlayerLoop(NativePlayerLoopSystem*) [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#21 pc 0x7437c0 (ExecutePlayerLoop(NativePlayerLoopSystem*) [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#22 pc 0x743a8c (PlayerLoop() [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#23 pc 0x90717c (UnityPlayerLoop() [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#24 pc 0x908340 (nativeRender(_JNIEnv*, _jobject*) [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/lib/arm64/libunity.so]) (BuildId: 0a8f2ba28e4baf7b)
#25 pc 0x12f2530 (art_jni_trampoline [/data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat])
#26 pc 0x34ef38 (com.unity3d.player.E0.handleMessage [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/oat/arm64/base.odex])
#27 pc 0xbc2bec (android.os.Handler.dispatchMessage [/data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat])
#28 pc 0xbca384 (android.os.Looper.loopOnce [/data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat])
#29 pc 0xbc9cbc (android.os.Looper.loop [/data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat])
#30 pc 0x2f0db4 (com.unity3d.player.G0.run [/data/app/~~zsC9cjjuE2-6Fa6_7y-tvw==/com.thegame-EmAsmZDAVjN08XI4jeqjhg==/oat/arm64/base.odex])
#31 pc 0x32d194 (art_quick_invoke_stub [/apex/com.android.art/lib64/libart.so]) (BuildId: 80d2ab18f9d259d8e546c1e6bae752b1)
#32 pc 0x2de270 (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*) [/apex/com.android.art/lib64/libart.so]) (BuildId: 80d2ab18f9d259d8e546c1e6bae752b1)
#33 pc 0x4bfcf4 (art::Thread::CreateCallback(void*) [/apex/com.android.art/lib64/libart.so]) (BuildId: 80d2ab18f9d259d8e546c1e6bae752b1)
#34 pc 0x10ba80 (__pthread_start(void*) [/apex/com.android.runtime/lib64/bionic/libc.so]) (BuildId: a87e89fc2c0a5753053f536add4d7ae1)
#35 pc 0x9f690 (__start_thread [/apex/com.android.runtime/lib64/bionic/libc.so]) (BuildId: a87e89fc2c0a5753053f536add4d7ae1)
        

I’m going through exactly the same situation.
This has been happening since I updated Unity 6000.0.30f1 to 6000.2.2f1 for Android memory page size 16kb support.

Similar dev here.
Physics 2D and particle systems causing crashes recently. Looking at your stack trace, your situation sounds like me.

Started happening in Unity 6.2. Still happening in Unity 6.3.

So, Unity is aware of this Particle System bug:

Fixed in 6000.3.0b1. Under consideration for 6000.0.X, 6000.2.X.

I’ve updated to 6000.3.0b1, and an avid customer who is testing this with me. Customer is still getting memory leak warnings, and Physics 2D crashes.

I’ve submitted a Unity issue just now: IN-116036 - Crash with Physics 2D, tlsf_free crash

DMP stack trace from my customer (Windows 10):

UnityPlayer.dll!tlsf_free()
UnityPlayer.dll!DynamicHeapAllocator::Deallocate(void *)
UnityPlayer.dll!DelayedPointerDeletionManager::CleanupPendingMainThreadPointersInternal(void)
UnityPlayer.dll!DelayedPointerDeletionManager::CleanupPendingMainThreadPointers(void)
UnityPlayer.dll!DualThreadAllocator<class DynamicHeapAllocator>::Allocate(unsigned __int64,int)
UnityPlayer.dll!MemoryManager::Allocate(unsigned __int64,unsigned __int64,struct MemLabelId,enum AllocateOptions,char const *,int)
UnityPlayer.dll!Box2D::b2BlockAllocator::Initialize(struct MemLabelId)
UnityPlayer.dll!PhysicsQuery2D::CircleCast(class PhysicsScene2D *,class Vector2f const &,float,class Vector2f const &,float,struct ContactFilter const &,class Collider2D const *,bool,struct RaycastHit2D *,int)
UnityPlayer.dll!PhysicsScene2D_CUSTOM_CircleCastArray_Internal(int const &,class Vector2f const &,float,class Vector2f const &,float,struct ContactFilter const &,struct BindingsManagedSpan *)

Win10 customer with 6000.3.0b1 also has a lot of repeating warnings in the log:

Internal: JobTempAlloc has allocations that are more than the maximum lifespan of 4 frames old - this is not allowed and likely a leak

To Debug, run app with -diag-job-temp-memory-leak-validation cmd line argument. This will output the callstacks of the leaked allocations.

Invalid memory pointer was detected in ThreadsafeLinearAllocator::Deallocate!

Internal: deleting an allocation that is older than its permitted lifetime of 4 frames (age = 7)

Additionally, a different customer (but no DMP file), trace mentions UnityEngine.Collider2D:get_bounds:

  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3E023DDA)
0x00007FFC3E023DDA (UnityPlayer) (function-name not available)
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3E01EE25)
0x00007FFC3E01EE25 (UnityPlayer) (function-name not available)
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3E01ED13)
0x00007FFC3E01ED13 (UnityPlayer) (function-name not available)
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3E01F149)
0x00007FFC3E01F149 (UnityPlayer) (function-name not available)
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3E027B3A)
0x00007FFC3E027B3A (UnityPlayer) (function-name not available)
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3E027B12)
0x00007FFC3E027B12 (UnityPlayer) (function-name not available)
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3DF33671)
0x00007FFC3DF33671 (UnityPlayer) (function-name not available)
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3E3A6F61)
0x00007FFC3E3A6F61 (UnityPlayer) (function-name not available)
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3E3A57F7)
0x00007FFC3E3A57F7 (UnityPlayer) (function-name not available)
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3E3A4565)
0x00007FFC3E3A4565 (UnityPlayer) (function-name not available)
0x00007FFC3EC294FB (UnityPlayer) UnityMain
0x00007FFC3EC37997 (UnityPlayer) UnityMain
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3DF87C53)
0x00007FFC3DF87C53 (UnityPlayer) (function-name not available)
0x000001ECF0E25C6D (Mono JIT Code) (wrapper managed-to-native) UnityEngine.Collider2D:get_bounds_Injected (intptr,UnityEngine.Bounds&)
0x000001ECF0E25B63 (Mono JIT Code) UnityEngine.Collider2D:get_bounds ()
0x000001ECF0D976E3 (Mono JIT Code) Tallowmere2.DungeonRoomObject_Corridor:Update ()
0x000001EC8D66C038 (Mono JIT Code) (wrapper runtime-invoke) object:runtime_invoke_void__this__ (object,intptr,intptr,intptr)
0x00007FFC3D5A6D5E (mono-2.0-bdwgc) mono_jit_set_domain
0x00007FFC3D4E8714 (mono-2.0-bdwgc) mono_object_get_virtual_method
0x00007FFC3D4E8800 (mono-2.0-bdwgc) mono_runtime_invoke
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3E2A6FEF)
0x00007FFC3E2A6FEF (UnityPlayer) (function-name not available)
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3E4B135A)
0x00007FFC3E4B135A (UnityPlayer) (function-name not available)
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3E4B141B)
0x00007FFC3E4B141B (UnityPlayer) (function-name not available)
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3E125C14)
0x00007FFC3E125C14 (UnityPlayer) (function-name not available)
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3E2E1F4D)
0x00007FFC3E2E1F4D (UnityPlayer) (function-name not available)
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3E2E2114)
0x00007FFC3E2E2114 (UnityPlayer) (function-name not available)
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3E2E258E)
0x00007FFC3E2E258E (UnityPlayer) (function-name not available)
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3E542D64)
0x00007FFC3E542D64 (UnityPlayer) (function-name not available)
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3E54528D)
0x00007FFC3E54528D (UnityPlayer) (function-name not available)
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFC3E547FA9)
0x00007FFC3E547FA9 (UnityPlayer) (function-name not available)
0x00007FFC3E54822B (UnityPlayer) UnityMain
  ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FF75E3811F2)
0x00007FF75E3811F2 (Tallowmere2) (function-name not available)
0x00007FFCC0057374 (KERNEL32) BaseThreadInitThunk
0x00007FFCC0C7CC91 (ntdll) RtlUserThreadStart

And searching around, tlsf_free bugs seem to be common with Unity… I do wonder if there’s a Physics 2D internal memory issue happening. It’s inconsistent, but something’s amiss.

Just seen a similar crash related to tlsf but not from particle system.
I just updated my game from unity 2022.3 to 6.2.2 and unity IAP package from 4.12 to 4.13.

Here is the crash log on an Android device (Android 15, device ram 7Gb):

Thread 0 (crashed)
0x000000742b0a01fc tlsf_remove_pool 
0x000000742b0a0388 tlsf_destroy 
0x000000742b0a04f8 tlsf_memalign 
0x000000742a716a60 DynamicHeapAllocator::Allocate(unsigned long, int) 
0x000000742a7171e8 DynamicHeapAllocator::Reallocate(void*, unsigned long, int) 
0x000000742a7199b4 MemoryManager::Reallocate(void*, unsigned long, unsigned long, MemLabelId, AllocateOptions, char const*, int) 
0x000000742ab2d398 core::vector<std::__ndk1::pair<core::basic_string<char, core::StringStorageDefault<char> > const, core::basic_string<char, core::StringStorageDefault<char> > >, core::allocator<std::__ndk1::pair<core::basic_string<char, core::StringStorageDefault<char> > const, core::basic_string<char, core::StringStorageDefault<char> > >, 0ul> >::reserve_impl(unsigned long) 
0x000000742ab2d33c std::__ndk1::pair<core::basic_string<char, core::StringStorageDefault<char> > const, core::basic_string<char, core::StringStorageDefault<char> > >& core::vector<std::__ndk1::pair<core::basic_string<char, core::StringStorageDefault<char> > const, core::basic_string<char, core::StringStorageDefault<char> > >, core::allocator<std::__ndk1::pair<core::basic_string<char, core::StringStorageDefault<char> > const, core::basic_string<char, core::StringStorageDefault<char> > >, 0ul> >::emplace_back<std::__ndk1::pair<core::basic_string<char, core::StringStorageDefault<char> > const, core::basic_string<char, core::StringStorageDefault<char> > > const&>(std::__ndk1::pair<core::basic_string<char, core::StringStorageDefault<char> > const, core::basic_string<char, core::StringStorageDefault<char> > > const&) 
0x000000742ab2ce3c HeaderMap::insert(std::__ndk1::pair<core::basic_string<char, core::StringStorageDefault<char> > const, core::basic_string<char, core::StringStorageDefault<char> > > const&) 
0x000000742ab2cc7c HeaderHelper::SetUnvalidated(core::basic_string_ref<char>, core::basic_string_ref<char>, bool) 
0x000000742ab2d004 HeaderHelper::ParseAndSetAllHeaders(char const*, unsigned long) 
0x000000742ab2d0d4 HeaderHelper::SetAllHeaders(char const*, unsigned long) 
0x000000742aae3ac8 TransportCurl::CurlReceiveHeaderCallback(void*, unsigned long, unsigned long, void*) 
0x000000742aafd760 Curl_cw_out_done 
0x000000742aafd42c Curl_cw_out_done 
0x000000742aafd228 Curl_bufq_sipn 
0x000000742aaf7000 Curl_bump_headersize 
0x000000742aaf76e4 Curl_http_write_resp_hds 
0x000000742aaf3cfc Curl_http_write_resp 
0x000000742ab076ac Curl_xfer_write_resp 
0x000000742ab068dc Curl_sendrecv 
0x000000742aaeeb9c curl_multi_perform 
0x000000742aaee420 curl_multi_perform 
0x000000742aae4adc CurlExecutor::CurlExecute() 
0x000000742a7f5f50 ujob_find_dependency_chain(ujob_control_t*, ujob_handle_t, ujob_dependency_chain&) 
0x000000742a7f61d4 ujob_is_complete(ujob_control_t*, ujob_handle_t) 
0x000000742a7f6dcc ConcurrentFreeList<ujob_dependency_chain_result>::ConcurrentFreeList(int, MemLabelId) 
0x000000742a87f504 Thread::RunThreadWrapper(void*) 

Got a crash dump from a different Windows 10 customer.
Unity 6000.3.0b1
Memory pointer warnings leading up to this.

Stack trace, looks like crash related to Canvas batch rendering:

UnityPlayer.dll!tlsf_free()
UnityPlayer.dll!DynamicHeapAllocator::Deallocate(void *)
UnityPlayer.dll!DualThreadAllocator<class DynamicHeapAllocator>::TryDeallocate(void *)
UnityPlayer.dll!MemoryManager::TryDeallocateWithLabel(void *,struct MemLabelId,char const *,int)
UnityPlayer.dll!core::vector<unsigned char const ,struct core::allocator<unsigned char const ,0> >::~vector<unsigned char const ,struct core::allocator<unsigned char const ,0> >(void)
UnityPlayer.dll!CanvasBatchIntermediateRenderer::`vector deleting destructor'(unsigned int)
UnityPlayer.dll!IntermediateRenderers::Clear(unsigned __int64)
UnityPlayer.dll!IntermediateRendererManager::ClearIntermediateRenderers(struct EntityId,unsigned __int64)
UnityPlayer.dll!RenderManager::RenderOffscreenCameras(void)
UnityPlayer.dll!PlayerRender(bool)
UnityPlayer.dll!ExecutePlayerLoop(struct NativePlayerLoopSystem *)
UnityPlayer.dll!ExecutePlayerLoop(struct NativePlayerLoopSystem *)
UnityPlayer.dll!PlayerLoop(void)
UnityPlayer.dll!PerformMainLoop()
UnityPlayer.dll!MainMessageLoop()
UnityPlayer.dll!UnityMainImpl(struct HINSTANCE__ *,struct HINSTANCE__ *,wchar_t *,int)
UnityPlayer.dll!UnityMain()
Tallowmere2.exe!__scrt_common_main_seh()

Player log was repeating this a lot for about 27 minutes before they crashed:

Invalid memory pointer was detected in ThreadsafeLinearAllocator::Deallocate!
0x00007fff56390f12 (UnityPlayer) UnityMain
0x00007fff56390c87 (UnityPlayer) UnityMain
0x00007fff56b8b2b8 (UnityPlayer) UnityMain
0x00007fff56b83dee (UnityPlayer) UnityMain
0x00007fff56c37dfe (UnityPlayer) UnityMain
0x00007fff56b7d582 (UnityPlayer) UnityMain
0x00007fff56b7d4d1 (UnityPlayer) UnityMain
0x00007fff56b7b42a (UnityPlayer) UnityMain
0x00007fff56df0664 (UnityPlayer) UnityMain
0x00007fff56c670ef (UnityPlayer) UnityMain
0x00007fff56c6166d (UnityPlayer) UnityMain
0x00007fff56c615bc (UnityPlayer) UnityMain
0x00007fff56b855f4 (UnityPlayer) UnityMain
0x00007fffe43c7374 (KERNEL32) BaseThreadInitThunk
0x00007fffe465cc91 (ntdll) RtlUserThreadStart

Is there something wrong with Unity’s MemoryManager / DynamicHeapAllocator / DualThreadAllocator ?

Same problem after updating Unity from 2022.3.58f1 to 2022.3.62f2

Hello!

I’ve been experiencing this issue or at least something similar as well but in an IL2CPP build for Windows 64 on Unity version 6000.0.58f2. I’ve also managed to reproduce the crash on other versions such as 6000.2.7f2 and 6000.4.0a2. The stack trace looks suspiciously familiar so I don’t think it only primarily affects Android, I may be wrong though.

Here is the outputted stack trace:

0x00007FFF5C136183 (UnityPlayer) tlsf_free
0x00007FFF5AFFF294 (UnityPlayer) DynamicHeapAllocator::Deallocate
0x00007FFF5B00701D (UnityPlayer) DualThreadAllocator<DynamicHeapAllocator>::TryDeallocate
0x00007FFF5B002F34 (UnityPlayer) MemoryManager::TryDeallocateWithLabel
0x00007FFF5B1FF66B (UnityPlayer) VertexData::Deallocate
0x00007FFF5AFDD152 (UnityPlayer) SharedObject<SharedMeshData,1,SharedObjectFactory<SharedMeshData> >::Release
0x00007FFF5BCEB404 (UnityPlayer) UI::DoSyncVertexPtr
0x00007FFF5BCEA13F (UnityPlayer) UI::CanvasRenderer::SyncDirtyElements
0x00007FFF5BCE7DF9 (UnityPlayer) UI::Canvas::UpdateBatches
0x00007FFF5BCD9A08 (UnityPlayer) UI::CanvasManager::WillRenderCanvases
0x00007FFF5B2AB2E7 (UnityPlayer) ExecutePlayerLoop
0x00007FFF5B2AB410 (UnityPlayer) ExecutePlayerLoop
0x00007FFF5B51ABE5 (UnityPlayer) PerformMainLoop
0x00007FFF5B51D52B (UnityPlayer) MainMessageLoop
0x00007FFF5B52040E (UnityPlayer) UnityMainImpl
0x00007FFF5B52066B (UnityPlayer) UnityMain
0x00007FF7A0BD11F6 (Runehaven) __scrt_common_main_seh
0x00007FF8BF46E8D7 (KERNEL32) BaseThreadInitThunk
0x00007FF8C0B6C53C (ntdll) RtlUserThreadStart

Here is the crash:

Crash!!!
SymInit: Symbol-SearchPath: '.;C:\git\Nekyia_2\Runehaven\Builds\Debug;C:/git/Nekyia_2/Runehaven/Builds/Debug/Runehaven_Data/Plugins\x86_64;C:/git/Nekyia_2/Runehaven/Builds/Debug/Runehaven_Data/Plugins;C:\git\Nekyia_2\Runehaven\Builds\Debug;C:\WINDOWS;C:\WINDOWS\system32;', symOptions: 534, UserName: 'Samue'
OS-Version: 10.0.0
C:\git\Nekyia_2\Runehaven\Builds\Debug\Runehaven.exe:Runehaven.exe (00007FF7A0BD0000), size: 692224 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 6000.0.58.57061
C:\WINDOWS\SYSTEM32\ntdll.dll:ntdll.dll (00007FF8C0AE0000), size: 2523136 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\System32\KERNEL32.DLL:KERNEL32.DLL (00007FF8BF440000), size: 823296 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\System32\KERNELBASE.dll:KERNELBASE.dll (00007FF8BDC70000), size: 4136960 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\git\Nekyia_2\Runehaven\Builds\Debug\UnityPlayer.dll:UnityPlayer.dll (00007FFF5AD50000), size: 34635776 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 6000.0.58.57061
C:\WINDOWS\System32\USER32.dll:USER32.dll (00007FF8BF9E0000), size: 1855488 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\System32\win32u.dll:win32u.dll (00007FF8BE560000), size: 159744 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\System32\GDI32.dll:GDI32.dll (00007FF8BF790000), size: 176128 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\System32\gdi32full.dll:gdi32full.dll (00007FF8BE630000), size: 1232896 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\System32\msvcp_win.dll:msvcp_win.dll (00007FF8BE070000), size: 667648 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\System32\ucrtbase.dll:ucrtbase.dll (00007FF8BE760000), size: 1355776 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\System32\ole32.dll:ole32.dll (00007FF8BF7C0000), size: 1671168 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\System32\combase.dll:combase.dll (00007FF8BFEB0000), size: 3649536 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\System32\RPCRT4.dll:RPCRT4.dll (00007FF8C0980000), size: 1146880 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\System32\SHLWAPI.dll:SHLWAPI.dll (00007FF8BE8B0000), size: 401408 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\System32\SETUPAPI.dll:SETUPAPI.dll (00007FF8BEF60000), size: 4751360 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\System32\msvcrt.dll:msvcrt.dll (00007FF8BEA30000), size: 692224 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 7.0.26100.6899
C:\WINDOWS\System32\ADVAPI32.dll:ADVAPI32.dll (00007FF8BEC00000), size: 737280 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\System32\sechost.dll:sechost.dll (00007FF8BEEB0000), size: 679936 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\SYSTEM32\VERSION.dll:VERSION.dll (00007FF8B6B80000), size: 45056 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.1150
C:\WINDOWS\System32\SHELL32.dll:SHELL32.dll (00007FF8C0230000), size: 7655424 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\System32\wintypes.dll:wintypes.dll (00007FF8BE120000), size: 1486848 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\System32\OLEAUT32.dll:OLEAUT32.dll (00007FF8BEDC0000), size: 880640 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\System32\IMM32.dll:IMM32.dll (00007FF8BF520000), size: 192512 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.4484
C:\WINDOWS\System32\CRYPT32.dll:CRYPT32.dll (00007FF8BE320000), size: 1536000 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.5074
C:\WINDOWS\System32\WS2_32.dll:WS2_32.dll (00007FF8BF960000), size: 475136 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\SYSTEM32\WINMM.dll:WINMM.dll (00007FF8B3B30000), size: 217088 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.5074
C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL:IPHLPAPI.DLL (00007FF8BC4C0000), size: 212992 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\SYSTEM32\WINHTTP.dll:WINHTTP.dll (00007FF8B6870000), size: 1175552 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\SYSTEM32\bcrypt.dll:bcrypt.dll (00007FF8BDB60000), size: 155648 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\SYSTEM32\OPENGL32.dll:OPENGL32.dll (00007FF874730000), size: 1097728 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.5074
C:\WINDOWS\SYSTEM32\HID.DLL:HID.DLL (00007FF8BC100000), size: 61440 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.1150
C:\WINDOWS\SYSTEM32\d3d11.dll:d3d11.dll (00007FF8B9BA0000), size: 2498560 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\SYSTEM32\dxgi.dll:dxgi.dll (00007FF8BABF0000), size: 1290240 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\SYSTEM32\dwmapi.dll:dwmapi.dll (00007FF8BAD50000), size: 184320 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\SYSTEM32\GLU32.dll:GLU32.dll (00007FF8ACB80000), size: 184320 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.1150
C:\WINDOWS\SYSTEM32\powrprof.dll:powrprof.dll (00007FF8BD570000), size: 385024 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.3912
C:\WINDOWS\SYSTEM32\dxcore.dll:dxcore.dll (00007FF8BAB80000), size: 278528 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\SYSTEM32\UMPDC.dll:UMPDC.dll (00007FF8BD550000), size: 81920 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.1301
C:\WINDOWS\SYSTEM32\kernel.appcore.dll:kernel.appcore.dll (00007FF8BC980000), size: 110592 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\System32\bcryptPrimitives.dll:bcryptPrimitives.dll (00007FF8BE590000), size: 622592 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\system32\uxtheme.dll:uxtheme.dll (00007FF8BAA30000), size: 696320 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\ProgramData\A-Volute\A-Volute.Nahimic\Modules\Scheduled\x64\AudioDevProps2.dll:AudioDevProps2.dll (00007FF837190000), size: 1257472 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 2.6.28.0
C:\WINDOWS\System32\shcore.dll:shcore.dll (00007FF8BFBD0000), size: 991232 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\SYSTEM32\windows.storage.dll:windows.storage.dll (00007FF8BB8A0000), size: 8769536 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\SYSTEM32\profapi.dll:profapi.dll (00007FF8BDB90000), size: 167936 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.4768
C:\git\Nekyia_2\Runehaven\Builds\Debug\GameAssembly.dll:GameAssembly.dll (00007FFF4FD60000), size: 64634880 (result: 0), SymType: '-deferred-', PDB: ''
C:\WINDOWS\SYSTEM32\dbghelp.dll:dbghelp.dll (00007FF8BB0A0000), size: 2367488 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.5074
C:\git\Nekyia_2\Runehaven\Builds\Debug\baselib.dll:baselib.dll (00007FF8517F0000), size: 241664 (result: 0), SymType: '-deferred-', PDB: ''
C:\WINDOWS\System32\clbcatq.dll:clbcatq.dll (00007FF8BF6C0000), size: 724992 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 2001.12.10941.16384
C:\Windows\System32\CoreMessaging.dll:CoreMessaging.dll (00007FF8BA040000), size: 1200128 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.4202
C:\WINDOWS\System32\MSCTF.dll:MSCTF.dll (00007FF8BF560000), size: 1421312 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll:directxdatabasehelper.dll (00007FF8B6B10000), size: 405504 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\SYSTEM32\cfgmgr32.dll:cfgmgr32.dll (00007FF8BD8E0000), size: 356352 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.4202
C:\WINDOWS\System32\DriverStore\FileRepository\nvlt.inf_amd64_972218997c567a38\nvldumdx.dll:nvldumdx.dll (00007FF871990000), size: 790528 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 32.0.15.6094
C:\WINDOWS\SYSTEM32\msasn1.dll:msasn1.dll (00007FF8BD2D0000), size: 77824 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\SYSTEM32\cryptnet.dll:cryptnet.dll (00007FF8B4D10000), size: 241664 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.3624
C:\WINDOWS\SYSTEM32\cryptbase.dll:cryptbase.dll (00007FF8BD280000), size: 49152 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\SYSTEM32\wldp.dll:wldp.dll (00007FF8BD3B0000), size: 413696 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\SYSTEM32\drvstore.dll:drvstore.dll (00007FF8B4B50000), size: 1527808 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\SYSTEM32\devobj.dll:devobj.dll (00007FF8BD940000), size: 184320 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.1150
C:\WINDOWS\System32\wintrust.dll:wintrust.dll (00007FF8BE290000), size: 520192 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\System32\imagehlp.dll:imagehlp.dll (00007FF8BEBD0000), size: 131072 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.4202
C:\WINDOWS\SYSTEM32\CRYPTSP.dll:CRYPTSP.dll (00007FF8BD260000), size: 110592 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6899
C:\WINDOWS\system32\rsaenh.dll:rsaenh.dll (00007FF8BC9A0000), size: 241664 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\System32\DriverStore\FileRepository\nvlt.inf_amd64_972218997c567a38\nvgpucomp64.dll:nvgpucomp64.dll (00007FFFE2020000), size: 33480704 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 32.0.15.6094
C:\WINDOWS\System32\DriverStore\FileRepository\nvlt.inf_amd64_972218997c567a38\nvwgf2umx.dll:nvwgf2umx.dll (00007FFFB0A20000), size: 68272128 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 32.0.15.6094
C:\WINDOWS\system32\nvspcap64.dll:nvspcap64.dll (00007FF800C40000), size: 2949120 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 3.28.0.417
C:\WINDOWS\SYSTEM32\ntmarta.dll:ntmarta.dll (00007FF8BCB40000), size: 221184 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.4202
C:\WINDOWS\System32\DriverStore\FileRepository\nvlt.inf_amd64_972218997c567a38\nvppex.dll:nvppex.dll (00007FFFFBD70000), size: 1396736 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 32.0.15.6094
C:\WINDOWS\System32\MMDevApi.dll:MMDevApi.dll (00007FF8B46B0000), size: 622592 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\SYSTEM32\AudioSes.dll:AudioSes.dll (00007FF8B2020000), size: 1814528 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\ProgramData\A-Volute\A-Volute.Nahimic\Modules\Scheduled\x64\ProductInfo.dll:ProductInfo.dll (00007FF850A40000), size: 421888 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 1.10.7.0
C:\ProgramData\A-Volute\A-Volute.Nahimic\Modules\Scheduled\x64\ASM.Plugin.AudioDevProps2.dll:ASM.Plugin.AudioDevProps2.dll (00007FF8B7DF0000), size: 274432 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 1.0.2.0
C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll:resourcepolicyclient.dll (00007FF8BB2F0000), size: 81920 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.1150
C:\Windows\System32\Windows.Gaming.Input.dll:Windows.Gaming.Input.dll (00007FF8A1220000), size: 888832 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\SYSTEM32\inputhost.dll:inputhost.dll (00007FF8B0410000), size: 1957888 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\Windows\System32\twinapi.appcore.dll:twinapi.appcore.dll (00007FF89F1E0000), size: 2379776 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\SYSTEM32\xinput1_3.dll:xinput1_3.dll (0000000000400000), size: 122880 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 9.18.944.0
C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_efc047bf3981cb5a\igd10iumd64.dll:igd10iumd64.dll (00007FF8AC150000), size: 5517312 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 32.0.101.6733
C:\WINDOWS\SYSTEM32\apphelp.dll:apphelp.dll (00007FF8BA840000), size: 651264 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_efc047bf3981cb5a\igd10um64xe.DLL:igd10um64xe.DLL (00007FF8AABC0000), size: 18186240 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 32.0.101.6733
C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_efc047bf3981cb5a\IntelControlLib.dll:IntelControlLib.dll (00007FF899C60000), size: 704512 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 1.0.235.0
C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_efc047bf3981cb5a\igdgmm64.dll:igdgmm64.dll (00007FF8A9110000), size: 5844992 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 32.0.101.6733
C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_efc047bf3981cb5a\igc64.dll:igc64.dll (00007FF8A37C0000), size: 85090304 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 32.0.101.6733
C:\WINDOWS\SYSTEM32\dcomp.dll:dcomp.dll (00007FF8B9E10000), size: 2236416 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\WINDOWS\SYSTEM32\Microsoft.Internal.WarpPal.dll:Microsoft.Internal.WarpPal.dll (00007FF8B8B00000), size: 102400 (result: 0), SymType: '-deferred-', PDB: ''
C:\WINDOWS\SYSTEM32\textinputframework.dll:textinputframework.dll (00007FF8B08C0000), size: 1351680 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725
C:\Windows\System32\uiautomationcore.dll:uiautomationcore.dll (00007FF889D10000), size: 4296704 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 7.2.26100.6725
C:\Windows\System32\OLEACC.dll:OLEACC.dll (00007FF89FED0000), size: 499712 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 7.2.26100.6725
C:\git\Nekyia_2\Runehaven\Builds\Debug\Runehaven_Data\Plugins\x86_64\lib_burst_generated.dll:lib_burst_generated.dll (00007FF839760000), size: 512000 (result: 0), SymType: '-deferred-', PDB: ''
C:\WINDOWS\SYSTEM32\SspiCli.dll:SspiCli.dll (00007FF8BCCE0000), size: 299008 (result: 0), SymType: '-deferred-', PDB: '', fileVersion: 10.0.26100.6725

I also seem to get hundreds or more of internal memory leaks with these messages:

Internal: JobTempAlloc has allocations that are more than the maximum lifespan of 4 frames old - this is not allowed and likely a leak
To Debug, run app with -diag-job-temp-memory-leak-validation cmd line argument. This will output the callstacks of the leaked allocations.

and

Internal: deleting an allocation that is older than its permitted lifetime of 4 frames (age = 13)

This is just one of the crashes I’ve had and different things seem to trigger it (generating meshes, text mesh pro, canvas logic), they happen sporadically and they all seem to be related to allocating or deallocating memory. Since it doesn’t look like a single thing is causing it, I also think it may be related to Unity’s memory allocation / DynamicHeapAllocator or something similar.

I’ve also tried changing the graphics API from Direct3D11 to Vulkan but I still got the crash.

Let me know if you need anything else or if I’ve missed something.

EDIT: I investigated this more and in my case, this was actually related to some code I wrote in a job system which wrote to memory incorrectly causing corrupted data. So I take back what is said earlier for my case.