Crash on tlsf_free when running Havok scene with profiler

Reproduction steps:
1. Open the attached project “HavokCrash”
2. Open the “Assets/Scenes/Test1” scene
3. Open Window → Analysis → Profiler window
4. Enter Play mode
5. Wait for the balls to fall
6. Exit Play mode

Expected result: No crash occurs
Actual result: Unity crashes when entering or exiting Play mode

Reproducible with: 1.0.0-pre.15 (2022.2.2f1, 2023.1.0a25)
Couldn’t test with:
2020.3.44f1, 2021.3.16f1, 2022.1.24f1 - Required package “Entities Graphics” is not available
0.51.1-preview.21 and lower - Errors in package “Library/PackageCache/com.havok.physics@0.51.1-preview.21/Havok.Physics/HavokSimulation.cs(368,81): error CS0246: The type or namespace name 'SimulationCallbacks' could not be found (are you missing a using directive or an assembly reference?)”

Reproducible on: macOS 13.1 (Intel)

0x00007ff60a31b414 (Unity) tlsf_free
0x00007ff60812385e (Unity) DynamicHeapAllocator::Deallocate
0x00007ff6081302f2 (Unity) DelayedPointerDeletionManager::CleanupPendingMainThreadPointersInternal
0x00007ff608130277 (Unity) DelayedPointerDeletionManager::CleanupPendingMainThreadPointers
0x00007ff60812f9e6 (Unity) DualThreadAllocator<DynamicHeapAllocator>::Allocate
0x00007ff6081229b1 (Unity) MemoryManager::Allocate
0x00007ff60812cace (Unity) malloc_internal

Notes:

• When entering Play mode in Unity 2023.1.0a25 the editor freezes.
• The reproduction for the crash is not consistent.