How to reproduce:
1. Open the attached project "IN-128156"
2. Open the "SampleScene"
3. In the Hierarchy, enable the SubScene
4. Drag the "DragMeToSubscene" GameObject into the SubScene
5. Observe the Editor

Actual result: The Editor freezes
Expected result: The Editor does not freeze

Reproducible with: 1.2.0-pre.6 (6000.0.b11), 1.4.4 (6000.0.65f1, 6000.3.4f1), 6000.4.0b4, 6000.5.0a4

Reproducible on: Windows 11
Not reproducible on: No other environments tested

Notes:
- “DragMeToSubscene" GameObject in the “SampleScene” Hierarchy has a Visual Tree Asset assigned to it
- The Editor crashes on "mono_jit_runtime_invoke" using versions 6000.0, 6000.4 and 6000.5
- Issue occurs with Input Action Asset, Input Action Reference and Visual Tree Asset
- Visual Tree Asset does not crash the Editor on 6000.0