Player Crash on scripting_invoke_profiler_begin when the built Player Scene has an empty UIDocument and is built on IL2CPP

How to reproduce:
1. Open the attached “IN-110405.zip” Project
2. Build and Run the “SampleScene” on a Mobile device
3. Observe the Crash

Reproducible with: 6000.0.55f1, 6000.1.16f1, 6000.2.1f1, 6000.3.0a4

Testing environment: macOS 15.6 (M3 Pro)

Reproducible on:
VLNQA00643 - LG Phoenix Plus (LM-X410.FGN), CPU: Snapdragon 820 MSM8996, GPU: Adreno 308, OS: 8.1.0
VLNQA00640 - Samsung Galaxy S25 Ultra (SM-S938B), CPU: Snapdragon 9 Elite (SM8750), GPU: Adreno 830, OS: 15
VLNQA00617 - Xiaomi Redmi Note 11S (2201117SY), CPU: MediaTek Helio G96 (MT6781), GPU: Mali-G57 MC2, OS: 11
VLNQA00615 - samsung Galaxy S22+ (SM-S906B), CPU: Exynos 2200, GPU: ANGLE (Samsung Xclipse 920) on Vulkan 1.1.179, OS: 13
VLNQA00545 - samsung Galaxy On7 Prime (SM-G611F), CPU: Exynos 7 Octa 7870, GPU: Mali-T830, OS: 8.0.0
VLNQA00516 - samsung Galaxy Fold (SM-F900F), CPU: Snapdragon 855 SM8150, GPU: Adreno 640, OS: 10
VLNQA00513 - OnePlus Nord N10 5G (BE2029), CPU: Snapdragon 690 SM6350, GPU: Adreno 619, OS: 11
VLNQA00494 - iPhone 14 Pro Max (MQ9T3PX/A), CPU: Apple A16 Bionic, OS: 16.3.1
VLNQA00374 - Galaxy S21 Plus 5G (SM-G996U), CPU: Snapdragon 888, GPU: Adreno 660, OS: 11

Notes:

• Not reproducible on Standalone Player
• Not reproducible with Mono Scripting Backend
• When Building and Running on iOS, XCode throws this error: “Thread 1: EXC_BAD_ACCESS (code=1, address=0x52) A bad access to memory terminated the process) on main files line 26: [ufw runUIApplicationMainWithArgc: argc argv: argv];
• Android Crash also shows this error: Assertion failed on expression: 'NULL != g_Instance'

First few lines of the stack trace (Android):
#00 pc 0000000001a2b46c /data/app/~~buQ7K_6LJ5WpkzYcQol9sA==/com.DefaultCompany.CanDeleteAndroidHttpErrors-j21T4894sFnyRu-ESAD4dA==/lib/arm64/libil2cpp.so (BuildId: 596fafdadb9c5fdd814faaba84dae361bee0bd52)
08-13 10:42:02.932 24470 24489 E CRASH :
#01 pc 000000000094a370 /data/app/~~buQ7K_6LJ5WpkzYcQol9sA==/com.DefaultCompany.CanDeleteAndroidHttpErrors-j21T4894sFnyRu-ESAD4dA==/lib/arm64/libunity.so (scripting_invoke_profiler_begin(ScriptingMethodPtr, ScriptingClassPtr, ScriptingMethodPtr, ScriptingObjectPtr)+76) (BuildId: df168809de263eac)
08-13 10:42:02.932 24470 24489 E CRASH :
#02 pc 00000000009589fc /data/app/~~buQ7K_6LJ5WpkzYcQol9sA==/com.DefaultCompany.CanDeleteAndroidHttpErrors-j21T4894sFnyRu-ESAD4dA==/lib/arm64/libunity.so (ScriptingInvocation::Invoke(ScriptingExceptionPtr*, bool)+104) (BuildId: df168809de263eac)
08-13 10:42:02.932 24470 24489 E CRASH :
#03 pc 0000000000af7410 /data/app/~~buQ7K_6LJ5WpkzYcQol9sA==/com.DefaultCompany.CanDeleteAndroidHttpErrors-j21T4894sFnyRu-ESAD4dA==/lib/arm64/libunity.so (Scripting::UnityEngine::UIElements::UIElementsRuntimeUtilityNativeProxy::RepaintPanels(bool, ScriptingExceptionPtr*)+84) (BuildId: df168809de263eac)
08-13 10:42:02.932 24470 24489 E CRASH :
#04 pc 0000000000cae06c /data/app/~~buQ7K_6LJ5WpkzYcQol9sA==/com.DefaultCompany.CanDeleteAndroidHttpErrors-j21T4894sFnyRu-ESAD4dA==/lib/arm64/libunity.so (BuildId: df168809de263eac)