Crash on Unity::MPE::ChannelService::GetChannelList when ChannelService methods are called before the channel service is started

How to reproduce:

1. Open the attached "IN-150953" project
2. In the menu bar, select "Bug Repro" > "ChannelService" > "2. CrashGetChannelList"
3. Observe the crash

Reproducible with: 6000.0.0f1, 6000.0.82f1, 6000.3.23f1, 6000.5.10f1, 6000.6.0b10, 6000.7.0a5

Reproducible on: Ubuntu 24.04 LTS, Ubuntu 26.04 LTS (by user), Windows 10 Pro
Not reproducible on: No other environments tested

Notes:

• "ChannelService.GetChannelClientList” and “ChannelService.DispatchMessages” crash the same way when called before “ChannelService.Start” (the "Bug Repro" menu has an item for each), while “IsRunning”, “GetPort”, and “GetAddress” return normally in the same state
• Also reproducible in batch mode (-batchmode -nographics -executeMethod)

First few lines of the stack trace:
Caught fatal signal - signo:11 code:1 errno:0 addr:(nil)
#0 0x0058db4c06a5f8 in Unity::MPE::ChannelService::GetChannelList()
#1 0x0058db4cda483a in ChannelService_CUSTOM_GetChannelList()
#2 0x000000408b60f6 in (wrapper managed-to-native) UnityEditor.MPE.ChannelService:GetChannelList ()
#3 0x000000408b537f in MpeChannelServiceRepro:CrashGetChannelList ()
#4 0x000000408b544e in (wrapper runtime-invoke) object:runtime_invoke_void (object,intptr,intptr,intptr)