Crash on profiling::BufferSerializer::AcquireNewBuffer when entering Play mode on a specific project

Reproduction steps:
1. Open the attached project "CrashRepro"
2. Enter and exit the Play mode until crash

Expected result: Play mode start/stops
Actual result: Editor crashes

Reproducible with: 6000.0.28f1, 6000.0.29f1
Not reproducible with: 6000.1.0a8
Fixed in: 6000.0.30f1
Couldn’t test with: 2021.3.47f1, 2022.3.55f1 - Cannot enter Play mode due to package errors

Reproducible on: Windows 11
Not reproducible on: No other environment tested

First few lines of stack trace:

0x00007ffaaf185d20 (Unity) purecall
0x00007ffaac3e5b2c (Unity) profiling::BufferSerializer::AcquireNewBuffer
0x00007ffaac3b9635 (Unity) profiler_begin
0x00007ffaabf759f3 (Unity) ReadWriteLock::ReadLock
0x00007ffaabf7bce1 (Unity) MemoryProfiler::GetAllocationRoot
0x00007ffaac3b742c (Unity) MemoryProfiler::UnregisterAllocation