Instantiating a Mesh with R/W disabled causes crash

Reproduction steps:
1. Open the attached project "ReadWrite.zip"
2. In Assets select KeyTypeA_1.fbx and enable Read/Write checkbox in Model import settings
3. Build the project to an Android device
4. Touch the screen so that a pink key is rendered
5. In KeyTypeA_1.fbx Model import settings disable Read/Write checkbox
6. Build the project to an Android device again
7. Swipe / touch anywhere in the scene

Expected result: App does not crash and nothing is rendered
Actual result: App crashes

Reproducible with: 2019.4.39f1, 2020.3.34f1, 2021.3.2f1, 2022.1.0f1, 2022.2.0a12

Reproducible with devices:
VLNQA00380, Xiaomi MI 8 Lite (MI 8 Lite), Android 9, CPU: Snapdragon 660, GPU: Adreno (TM) 512
VLNQA00052, Xiaomi MI MAX (MI MAX), Android 7.0, CPU: Snapdragon 617 MSM8952, GPU: Adreno (TM) 510
----------, Oneplus OnePlus 9 5G (LE2113), Android 12, CPU: Snapdragon 888, GPU: Adreno (TM) 660
Not reproducible with:
VLNQA00381, Xiaomi Redmi Note 8 Pro (Redmi Note 8 Pro), Android 9, CPU: MediaTek Helios G90T MT6785T, GPU: Mali-G76 MC4

Notes:
Does not reproduce with iOS devices

Edit (07/13/22): Reproduces with Windows DX11/Vulkan. Note that project only supports touch input so this may need to be modified to reproduce crash. Note that this only reproduces in the player, possibly Mesh's are always treated as 'readable' even when Mesh.isReadable is false in the Editor

Crash log:
05-05 19:18:38.181 8634 8634 E AndroidRuntime: FATAL EXCEPTION: main
05-05 19:18:38.181 8634 8634 E AndroidRuntime: Process: com.unity3d.ReadWriteRU1, PID: 8634
05-05 19:18:38.181 8634 8634 E AndroidRuntime: java.lang.Error: *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
05-05 19:18:38.181 8634 8634 E AndroidRuntime: Version '2019.4.39f1 (78d14dfa024b)', Build type 'Release', Scripting Backend 'il2cpp', CPU 'arm64-v8a'
05-05 19:18:38.181 8634 8634 E AndroidRuntime: Build fingerprint: 'Xiaomi/platina/platina:9/PKQ1.181007.001/V11.0.4.0.PDTCNXM:user/release-keys'
05-05 19:18:38.181 8634 8634 E AndroidRuntime: Revision: '0'
05-05 19:18:38.181 8634 8634 E AndroidRuntime: ABI: 'arm64'
05-05 19:18:38.181 8634 8634 E AndroidRuntime: Timestamp: 2022-05-05 19:18:37+0800
05-05 19:18:38.181 8634 8634 E AndroidRuntime: pid: 8634, tid: 8721, name: UnityGfxDeviceW >>> com.unity3d.ReadWriteRU1 <<<
05-05 19:18:38.181 8634 8634 E AndroidRuntime: uid: 10262
05-05 19:18:38.181 8634 8634 E AndroidRuntime: signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0
05-05 19:18:38.181 8634 8634 E AndroidRuntime: Cause: null pointer dereference
05-05 19:18:38.181 8634 8634 E AndroidRuntime: x0 00000007fe9044d0 x1 0000000000000000 x2 000000000000832c x3 00000007fe9044d0
05-05 19:18:38.181 8634 8634 E AndroidRuntime: x4 000000000000832c x5 00000007fe90c7fc x6 0000000000008343 x7 0000000000000002
05-05 19:18:38.181 8634 8634 E AndroidRuntime: x8 000000000000000c x9 0000000000000000 x10 0000000000000020 x11 0000000000000000
05-05 19:18:38.181 8634 8634 E AndroidRuntime: x12 000000009d03800a x13 0000000000000000 x14 000000000000041a x15 0000000000000000
05-05 19:18:38.181 8634 8634 E AndroidRuntime: x16 0000007084a73840 x17 000000711486bef0 x18 00000007fe9044d0 x19 00000070749ff800
05-05 19:18:38.181 8634 8634 E AndroidRuntime: x20 0000000000000000 x21 0000000000000000 x22 00000070749ea708 x23 0000007071f71bac
05-05 19:18:38.181 8634 8634 E AndroidRuntime: x24 000000000000002c x25 000000000000832c x26 0000000000000000 x27 0000000000000001
05-05 19:18:38.181 8634 8634 E AndroidRuntime: x28 0000000000000000 x29 0000007074b5ed00
05-05 19:18:38.181 8634 8634 E AndroidRuntime: sp 0000007074b5ec40 lr 00000070847b8d68 pc 000000711486bfd8

Backtrace:
05-05 19:18:38.181 8634 8634 E AndroidRuntime: #00 pc 000000000001dfd8 /system/lib64/libc.so (memcpy+232) (BuildId: 616fec4dc7e622c342d5102f2890f0cc)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: #01 pc 00000000001d0d64 /vendor/lib64/egl/libGLESv2_adreno.so (EsxVertexArrayObject::UpdateInternalVbos(EsxDrawDescriptor const*, unsigned int, EsxAttributeDesc const*)+1644)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: #02 pc 00000000003374f4 /vendor/lib64/egl/libGLESv2_adreno.so (A5xVertexArrayObject::CalcVfdRegs(EsxDrawDescriptor const*, A5xVfdRegs*, int)+892)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: #03 pc 000000000034ff54 /vendor/lib64/egl/libGLESv2_adreno.so (A5xContext::ValidateState(EsxDrawDescriptor const*)+1212)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: #04 pc 000000000033c820 /vendor/lib64/egl/libGLESv2_adreno.so (A5xContext::HwValidateGfxState(EsxDrawDescriptor const*)+16)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: #05 pc 0000000000115178 /vendor/lib64/egl/libGLESv2_adreno.so (EsxContext::ValidateGfxState(EsxDrawDescriptor const*)+1968)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: #06 pc 00000000000fd240 /vendor/lib64/egl/libGLESv2_adreno.so (EsxContext::DrawArraysInstanced(EsxPrimType, int, unsigned int, unsigned int)+416)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: #07 pc 00000000007006c8 /data/app/com.unity3d.ReadWriteRU1-L1BAAu6jF8m3wDlhCOmCWg==/lib/arm64/libunity.so (BuildId: 498a303a98b3d9cfeeaec068a495c157c17b9742)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: #08 pc 000000000082711c /data/app/com.unity3d.ReadWriteRU1-L1BAAu6jF8m3wDlhCOmCWg==/lib/arm64/libunity.so (BuildId: 498a303a98b3d9cfeeaec068a495c157c17b9742)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: #09 pc 0000000000705870 /data/app/com.unity3d.ReadWriteRU1-L1BAAu6jF8m3wDlhCOmCWg==/lib/arm64/libunity.so (BuildId: 498a303a98b3d9cfeeaec068a495c157c17b9742)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: #10 pc 00000000003b1dd8 /data/app/com.unity3d.ReadWriteRU1-L1BAAu6jF8m3wDlhCOmCWg==/lib/arm64/libunity.so (BuildId: 498a303a98b3d9cfeeaec068a495c157c17b9742)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: #11 pc 00000000003b28f4 /data/app/com.unity3d.ReadWriteRU1-L1BAAu6jF8m3wDlhCOmCWg==/lib/arm64/libunity.so (BuildId: 498a303a98b3d9cfeeaec068a495c157c17b9742)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: #12 pc 00000000003a98ec /data/app/com.unity3d.ReadWriteRU1-L1BAAu6jF8m3wDlhCOmCWg==/lib/arm64/libunity.so (BuildId: 498a303a98b3d9cfeeaec068a495c157c17b9742)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: #13 pc 00000000005993e8 /data/app/com.unity3d.ReadWriteRU1-L1BAAu6jF8m3wDlhCOmCWg==/lib/arm64/libunity.so (BuildId: 498a303a98b3d9cfeeaec068a495c157c17b9742)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: #14 pc 00000000000901ac /system/lib64/libc.so (__pthread_start(void*)+36) (BuildId: 616fec4dc7e622c342d5102f2890f0cc)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: #15 pc 00000000000239a8 /system/lib64/libc.so (__start_thread+68) (BuildId: 616fec4dc7e622c342d5102f2890f0cc)
05-05 19:18:38.181 8634 8634 E AndroidRuntime:
05-05 19:18:38.181 8634 8634 E AndroidRuntime: at libc.memcpy(memcpy:232)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: at libGLESv2_adreno.EsxVertexArrayObject::UpdateInternalVbos(EsxDrawDescriptor const*, unsigned int, EsxAttributeDesc const*)(UpdateInternalVbos:1644)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: at libGLESv2_adreno.A5xVertexArrayObject::CalcVfdRegs(EsxDrawDescriptor const*, A5xVfdRegs*, int)(CalcVfdRegs:892)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: at libGLESv2_adreno.A5xContext::ValidateState(EsxDrawDescriptor const*)(ValidateState:1212)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: at libGLESv2_adreno.A5xContext::HwValidateGfxState(EsxDrawDescriptor const*)(HwValidateGfxState:16)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: at libGLESv2_adreno.EsxContext::ValidateGfxState(EsxDrawDescriptor const*)(ValidateGfxState:1968)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: at libGLESv2_adreno.EsxContext::DrawArraysInstanced(EsxPrimType, int, unsigned int, unsigned int)(DrawArraysInstanced:416)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: at libunity.0x7006c8(Native Method)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: at libunity.0x82711c(Native Method)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: at libunity.0x705870(Native Method)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: at libunity.0x3b1dd8(Native Method)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: at libunity.0x3b28f4(Native Method)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: at libunity.0x3a98ec(Native Method)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: at libunity.0x5993e8(Native Method)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: at libc.{}pthread_start(void*)({_}_pthread_start:36)
05-05 19:18:38.181 8634 8634 E AndroidRuntime: at libc.{}start_thread({_}_start_thread:68)
05-05 19:18:38.203 2124 3540 W ActivityManager: Force finishing activity