How to reproduce:
1. Open the “ECS_PhysicsShape.zip“ project
2. Open the “Crash Repro Scene“ Scene
3. Enable the “Crash_Repro_SUB“ Subscene
4. Enter and exit Play Mode
5. Observe the Editor

Expected results: The Editor continues to function and does not get stuck on the “Application.UpdateScene” dialog box
Actual results: The Editor freezes and crashes on “Application.UpdateScene”

Reproducible in: 1.0.8, 1.2.4 (2022.3.47f1, 6000.0.19f1)
Could not test in: 2021.3.43f1 (PhysicsShapeAuth.cs script errors and other package errors)

Reproduced on: Windows 11 Pro (23H2)
Not reproduced on: No other environment tested

Notes:
- After exiting Play Mode, selecting the Quad GameObject quickens the crash by invoking an “Application.UpdateScene“
- If Physics Shape is disabled/removed on the ECS_Player GameObject, the Editor crashes on entering Play Mode
- Sometimes the Editor crashes without invoking the Bug Reporter
- Physics Shape is part of the Unity Physics package Sample
- In versions before 1.0.8 there are a lot of package errors preventing entering Play Mode

First few lines of stack trace:

{{0x00007FF713FD59E1 (Unity) block_locate_free }}
{{0x00007FF713FD6067 (Unity) tlsf_memalign }}
{{0x00007FF711D75B29 (Unity) DynamicHeapAllocator::Allocate }}
{{0x00007FF711D7D6FF (Unity) DynamicHeapAllocator::Reallocate }}
{{0x00007FF711D878E1 (Unity) DualThreadAllocator<DynamicHeapAllocator>::Reallocate}}