Crash on tlsf_free when generating lighting or opening a different scene, while in a corrupted scene

Reproduction steps:
1. Open the attached “BugRepro“ project
2. Open the “SampleScene”
3. Open the Lighting window (Window > Rendering > Lighting)
4. Click the “Generate Lighting” button
5. In the pop-up, click either “Yes” or “No”
6. Observe the crash

Expected result: Lighting generation starts
Actual result: Editor crashes

Alternatively:
1. Open the attached “BugRepro” project
2. Open the “SampleScene”
3. Open any (new or the same) scene

Expected result: The desired scene opens
Actual result: Editor crashes

Reproducible with: 6000.0.0b15, 6000.0.11f1
Not reproducible with: 2021.3.40f1, 2022.3.37f1, 6000.0.0b14

Reproducible on: Windows 10 (by reporter), Windows 11
Not reproducible on: No other environment tested

Notes:

• Also crashes when removing the URP package
• Not reproducible in an empty scene

First few lines of the stack trace:
0x00007FF80B6A4F39 (Unity) tlsf_free
0x00007FF8091E6BC0 (Unity) DynamicHeapAllocator::Deallocate
0x00007FF8091F8343 (Unity) DualThreadAllocator<DynamicHeapAllocator>::TryDeallocate
0x00007FF8091EE935 (Unity) MemoryManager::TryDeallocateWithLabel
0x00007FF8091F0153 (Unity) free_alloc_internal