Steps to reproduce:
1. Open the “user’s attached project”
2. Observe the crash

Reproducible with: 1.3.2 (6000.0.59f1, 6000.2.7f1, 6000.3.0b4, 6000.4.0a1)

Reproducible on: macOS 15.6.1 (M1 Max), Windows 11 (user’s)
Not reproducible on: no other environment tested

Notes:
- [BurstCompile] is enabled for FrenzyMainEcsEffectHandler::TryUnapplyEffect
- Sometimes it takes a couple of minutes for the Editor to crash after opening

First few lines of StackTraces:
#0 0x000003e1f4cc50 in SleefInjection::run(llvm::Module&, std::{}1::function<llvm::TargetTransformInfo& (llvm::Function&)>, std::{}{}1::function<llvm::TargetLibraryInfo& (llvm::Function&)>, std::{_}_1::function<llvm::AssumptionCache& (llvm::Function&)>, llvm::ProfileSummaryInfo&) const
#1 0x000003e1f4d348 in SleefInjectionPass::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&)
#2 0x000003e2c4f94c in llvm::PassManager<llvm::Module, llvm::AnalysisManager<llvm::Module>>::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&)
#3 0x000003e1f17ee8 in burst_OptimizeModule
#4 0x000003a866a074 in (wrapper managed-to-native) object:wrapper_native_0x3e1f0d2cc (Burst.Backend.Module,Burst.Backend.TargetMachine,intptr,intptr,uint,bool,Burst.Backend.DebugDataFlags) [

{0x36fa90778}

+ 0x154] (0x3a8669f20 0x3a866a12c) [0x17ffc2540 - Burst Child Domain]

0x00007FFAB550FA79 (burst-llvm-18) burst_SetCurrentDebugLocation
0x00007FFAB550EDF7 (burst-llvm-18) burst_SetCurrentDebugLocation
0x00007FFAB54E4A4E (burst-llvm-18) burst_IsLinkingSupported
0x00007FFAB54ED252 (burst-llvm-18) burst_OptimizeModule
0x0000026508277527 (Mono JIT Code) (wrapper managed-to-native) object:wrapper_native_00007FFAB54E6310 (Burst.Backend.Module,Burst.Backend.TargetMachine,intptr,intptr,uint,bool,Burst.Backend.DebugDataFlags)