Editor crashes on tlsf_realloc_align when ParticleSystem.Emit is called and Render module is enabled for Particle System

Reproduction steps:
1. Open repro scene
2. Enter PlayMode
3. Accelerate (press "w" or up arrow)

Expected result: Car moves forward
Actual result: Unity editor crashes

Reproducible with: 2018.1.0b5, 2018.1.0b9, 2018.2.0a1
Not reproducible with: 2017.1.3p1, 2017.2.1p4, 2017.3.1p2, 2018.1.0b4
Regression introduced in: 2018.1.0b5

Workarounds:
- Move back (press "a" or down arrow) before accelerating (pressing "w" or up arrow). In this case, the issue does not reproduce until the Editor is restarted
- Select Car -> Particles -> ParticleBurnoutSmoke and disable Renderer module

Notes:
Crashes in Editor on both Windows and Mac.
Build crashes on both Windows and Mac.