How to reproduce:
1. Open the attached project (SerializedReferenceCrash.zip)
2. In the Project window, select the 'Graph' Asset
3. Open the 'Graph' Asset in a text editor
4. Change the referenced class name 'NodeA' to any non-existing class name (for example, 'NodeD') and save the file
5. Return focus to the Editor

Expected result: a single error like such 'Unknown managed type referenced: [SerializeReference.Test.Editor] SerializeRef.Test.NodeD ' is thrown in the Console
Actual result: 'Assertion failed on expression: 'm_ByteOffset < m_Data->size()'' and other errors are constantly spammed (2019.4) or the Editor crashes (2020.2 and above)

Reproducible with: 2019.4.18f1, 2020.2.2f1, 2021.1.0b3, 2021.2.0a3
Could not test with: 2018.4.31f1 (SerializeReference not introduced)

First lines of the stack trace:
0x00007ff618cb10f7 (Unity) ModuleMetadata_CUSTOM_GetModuleIncludeSettingForObject
0x000002895e4ae4e7 (Mono JIT Code) (wrapper managed-to-native) UnityEditor.ModuleMetadata:GetModuleIncludeSettingForObject (UnityEngine.Object)
0x000002895e4ae43b (Mono JIT Code) UnityEditor.InspectorWindowUtils:IsExcludedClass (UnityEngine.Object)
0x000002895e4a53fb (Mono JIT Code) UnityEditor.UIElements.EditorElement:HeaderOnGUI ()