MySQL Bugs: #78238: --query-alloc-block-size issues with numerous different crash examples

Bug #78238	--query-alloc-block-size issues with numerous different crash examples
Submitted:	27 Aug 2015 5:09	Modified:	5 Sep 2015 3:28
Reporter:	Roel Van de Paar	Email Updates:
Status:	Verified	Impact on me:	None
Category:	MySQL Server: Options	Severity:	S1 (Critical)
Version:	5.6, 5.7.8 (RC2), 5.7.9	OS:	Any
Assigned to:		CPU Architecture:	Any
Tags:	opt

Description:
It is very easy to OOM and crash mysqld, particularly with this option:
--query-alloc-block-size=1125899906842624

How to repeat:
Use --query-alloc-block-size=1125899906842624 in a variety of situations and you'll soon see a plethora of different crashes.

CRASH #1 Example

Version: '5.7.8-rc'  socket: '/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/socket.sock'  port: 18682  MySQL Community Server (GPL)
2015-08-27T05:01:16.133799Z 4 [ERROR] /sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld: Out of memory (Needed 0 bytes)
2015-08-27T05:01:16.133820Z 4 [ERROR] Out of memory; check if mysqld or some other process uses all available memory; if not, you may have to use 'ulimit' to allow mysqld to use more memory or you can add more swap space
[...]
2015-08-27T05:01:16.135004Z 0 [Note] InnoDB: Starting shutdown...
2015-08-27T05:01:16.235131Z 0 [Note] InnoDB: Dumping buffer pool(s) to .//ib_buffer_pool
2015-08-27T05:01:16.241088Z 0 [Note] InnoDB: Buffer pool(s) dump completed at 150827 15:01:16
05:01:17 UTC - mysqld got signal 11 ;

+bt
#0  0x00007f14fca0a771 in __pthread_kill (threadid=<optimized out>, signo=11) at ../nptl/sysdeps/unix/sysv/linux/pthread_kill.c:61
#1  0x0000000000761db4 in handle_fatal_signal (sig=11) at /export/home/pb2/build/sb_0-15961582-1437395640.67/mysql-5.7.8-rc/sql/signal_handler.cc:220
#2  <signal handler called>
#3  je_tcache_dalloc_small (binind=108, ptr=0x7f14f4ba1000, tcache=0x7f14fa806000) at include/jemalloc/internal/tcache.h:406
#4  je_arena_dalloc (try_tcache=true, ptr=0x7f14f4ba1000, chunk=<optimized out>, arena=0x7f14fac000c0) at include/jemalloc/internal/arena.h:1044
#5  je_idalloct (try_tcache=true, ptr=0x7f14f4ba1000) at include/jemalloc/internal/jemalloc_internal.h:898
#6  je_iqalloct (try_tcache=true, ptr=0x7f14f4ba1000) at include/jemalloc/internal/jemalloc_internal.h:917
#7  je_iqalloc (ptr=0x7f14f4ba1000) at include/jemalloc/internal/jemalloc_internal.h:924
#8  ifree (ptr=0x7f14f4ba1000) at src/jemalloc.c:1233
#9  free (ptr=0x7f14f4ba1000) at src/jemalloc.c:1308
#10 0x0000000000fcf577 in deallocate (n_elements=0, ptr=0x7f14f4ba1018 "", this=<optimized out>) at /export/home/pb2/build/sb_0-15961582-1437395640.67/mysql-5.7.8-rc/storage/innobase/include/ut0new.h:379
#11 AIO::~AIO (this=0x7f14f47bfd98, __in_chrg=<optimized out>) at /export/home/pb2/build/sb_0-15961582-1437395640.67/mysql-5.7.8-rc/storage/innobase/os/os0file.cc:6194
#12 0x0000000000fcf7c5 in destroy (p=0x7f14f47bfd98, this=<optimized out>) at /export/home/pb2/build/sb_0-15961582-1437395640.67/mysql-5.7.8-rc/storage/innobase/include/ut0new.h:400
#13 ut_delete<AIO> (ptr=0x7f14f47bfd98) at /export/home/pb2/build/sb_0-15961582-1437395640.67/mysql-5.7.8-rc/storage/innobase/include/ut0new.h:797
#14 AIO::shutdown () at /export/home/pb2/build/sb_0-15961582-1437395640.67/mysql-5.7.8-rc/storage/innobase/os/os0file.cc:6339
#15 0x0000000000fcf80e in os_aio_free () at /export/home/pb2/build/sb_0-15961582-1437395640.67/mysql-5.7.8-rc/storage/innobase/os/os0file.cc:6374
#16 0x0000000001071bef in innobase_shutdown_for_mysql () at /export/home/pb2/build/sb_0-15961582-1437395640.67/mysql-5.7.8-rc/storage/innobase/srv/srv0start.cc:2706
#17 0x0000000000f57c64 in innobase_end (hton=<optimized out>, type=<optimized out>) at /export/home/pb2/build/sb_0-15961582-1437395640.67/mysql-5.7.8-rc/storage/innobase/handler/ha_innodb.cc:3747
#18 0x00000000007a212c in ha_finalize_handlerton (plugin=0x7f14f27faf10) at /export/home/pb2/build/sb_0-15961582-1437395640.67/mysql-5.7.8-rc/sql/handler.cc:782
#19 0x0000000000c9d6d6 in plugin_deinitialize (ref_check=true, plugin=0x7f14f27faf10) at /export/home/pb2/build/sb_0-15961582-1437395640.67/mysql-5.7.8-rc/sql/sql_plugin.cc:973
#20 reap_plugins () at /export/home/pb2/build/sb_0-15961582-1437395640.67/mysql-5.7.8-rc/sql/sql_plugin.cc:1052
#21 0x0000000000c9f728 in plugin_shutdown () at /export/home/pb2/build/sb_0-15961582-1437395640.67/mysql-5.7.8-rc/sql/sql_plugin.cc:1771
#22 0x00000000007579c8 in clean_up (print_message=true) at /export/home/pb2/build/sb_0-15961582-1437395640.67/mysql-5.7.8-rc/sql/mysqld.cc:1420
#23 0x000000000075c880 in mysqld_main (argc=11, argv=0x7f14fa8202e8) at /export/home/pb2/build/sb_0-15961582-1437395640.67/mysql-5.7.8-rc/sql/mysqld.cc:5025
#24 0x00007f14fb5faaf5 in __libc_start_main (main=0x752050 <main(int, char**)>, argc=11, ubp_av=0x7fff385233d8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fff385233c8) at libc-start.c:274
#25 0x0000000000751f89 in _start ()

CRASH #2 EXAMPLE

2015-08-27T04:56:35.762545Z 0 [Note] Server hostname (bind-address): '*'; port: 36676
2015-08-27T04:56:35.762684Z 0 [Note] IPv6 is available.
2015-08-27T04:56:35.762692Z 0 [Note]   - '::' resolves to '::';
2015-08-27T04:56:35.762704Z 0 [Note] Server socket created on IP: '::'.
04:56:35 UTC - mysqld got signal 11 ;

stack_bottom = 7fff83f83648 thread_stack 0x40000
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(my_print_stacktrace+0x35)[0xe8ae55]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(handle_fatal_signal+0x4a4)[0x761e54]
/lib64/libpthread.so.0(+0xf130)[0x7f12ab07d130]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(table_cache_key+0x8)[0xd2a898]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(my_hash_first_from_hash_value+0x6b)[0xe75b9b]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(my_hash_search_using_hash_value+0x11)[0xe75da1]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z10open_tableP3THDP10TABLE_LISTP18Open_table_context+0x5c3)[0xc29a83]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z11open_tablesP3THDPP10TABLE_LISTPjjP19Prelocking_strategy+0xd16)[0xc2c0a6]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z20open_and_lock_tablesP3THDP10TABLE_LISTjP19Prelocking_strategy+0x3e)[0xc2c5fe]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_ZN22PFS_engine_table_share15check_one_tableEP3THD+0x15b)[0xef61bb]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_ZN22PFS_engine_table_share16check_all_tablesEP3THD+0x2c)[0xef62fc]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z24check_performance_schemav+0x49)[0xef3399]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z11mysqld_mainiPPc+0x156c)[0x75c88c]

CRASH #3 EXAMPLE

With these options

--no-defaults --log-output=none --sql_mode=ONLY_FULL_GROUP_BY --event-scheduler=ON --maximum-bulk_insert_buffer_size=1M --maximum-join_buffer_size=1M --maximum-max_heap_table_size=1M --maximum-max_join_size=1M --maximum-myisam_max_sort_file_size=1M --maximum-myisam_mmap_size=1M --maximum-myisam_sort_buffer_size=1M --maximum-optimizer_trace_max_mem_size=1M --maximum-preload_buffer_size=1M --maximum-query_alloc_block_size=1M --maximum-query_prealloc_size=1M --maximum-range_alloc_block_size=1M --maximum-read_buffer_size=1M --maximum-read_rnd_buffer_size=1M --maximum-sort_buffer_size=1M --maximum-tmp_table_size=1M --maximum-transaction_alloc_block_size=1M --maximum-transaction_prealloc_size=1M --log-output=none --sql_mode=ONLY_FULL_GROUP_BY --slave-preserve-commit-order=1 --query-alloc-block-size=1125899906842624 --innodb-read-ahead-threshold=1023 --server-id=254 --sync-master-info=1 --character-set-filesystem=utf32 --show-compatibility-56=0 --innodb-api-bk-commit-interval=12 --performance-schema-max-digest-length=2047

One can produce a GLIBC crash...

GLIBC Crash output from last comment

*** Error in `/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld': malloc(): smallbin double linked list corrupted: 0x0000000004022270 ***
======= Backtrace: =========
/lib64/libc.so.6(+0x7bc67)[0x7fce0ff9ac67]
/lib64/libc.so.6(+0x7ec64)[0x7fce0ff9dc64]
/lib64/libc.so.6(__libc_malloc+0x5c)[0x7fce0ff9f18c]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(my_malloc+0x98)[0xe876d8]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld[0xd241b9]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z14open_table_defP3THDP11TABLE_SHAREj+0x60d)[0xd27ddd]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z15get_table_shareP3THDP10TABLE_LISTPKcmjPij+0x172)[0xc27242]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z10open_tableP3THDP10TABLE_LISTP18Open_table_context+0x7cf)[0xc29c8f]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z11open_tablesP3THDPP10TABLE_LISTPjjP19Prelocking_strategy+0xd16)[0xc2c0a6]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z20open_and_lock_tablesP3THDP10TABLE_LISTjP19Prelocking_strategy+0x3e)[0xc2c5fe]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_ZN22PFS_engine_table_share15check_one_tableEP3THD+0x15b)[0xef61bb]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_ZN22PFS_engine_table_share16check_all_tablesEP3THD+0x2c)[0xef62fc]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z24check_performance_schemav+0x49)[0xef3399]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z11mysqld_mainiPPc+0x156c)[0x75c88c]
/lib64/libc.so.6(__libc_start_main+0xf5)[0x7fce0ff40af5]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld[0x751f89]
======= Memory map: ========
00400000-019e6000 r-xp 00000000 08:00 29765548                           /sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld
01be5000-01d80000 rw-p 015e5000 08:00 29765548                           /sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld
01d80000-01e16000 rw-p 00000000 00:00 0
0379f000-0405b000 rw-p 00000000 00:00 0                                  [heap]
7fcdb0000000-7fcdb0021000 rw-p 00000000 00:00 0
7fcdb0021000-7fcdb4000000 ---p 00000000 00:00 0
7fcdb8000000-7fcdb8021000 rw-p 00000000 00:00 0
7fcdb8021000-7fcdbc000000 ---p 00000000 00:00 0
7fcdbc000000-7fcdbc021000 rw-p 00000000 00:00 0
7fcdbc021000-7fcdc0000000 ---p 00000000 00:00 0
7fcdc1ffc000-7fcdc1ffd000 ---p 00000000 00:00 0
7fcdc1ffd000-7fcdc27fd000 rw-p 00000000 00:00 0
7fcdc27fd000-7fcdc27fe000 ---p 00000000 00:00 0
7fcdc27fe000-7fcdc2ffe000 rw-p 00000000 00:00 0                          [stack:479]
7fcdc2ffe000-7fcdc2fff000 ---p 00000000 00:00 0
7fcdc2fff000-7fcdc37ff000 rw-p 00000000 00:00 0                          [stack:478]
7fcdc37ff000-7fcdc3800000 ---p 00000000 00:00 0
7fcdc3800000-7fcdc4000000 rw-p 00000000 00:00 0                          [stack:477]
7fcdc4000000-7fcdc4021000 rw-p 00000000 00:00 0
7fcdc4021000-7fcdc8000000 ---p 00000000 00:00 0
7fcdc8000000-7fcdc8021000 rw-p 00000000 00:00 0
7fcdc8021000-7fcdcc000000 ---p 00000000 00:00 0
7fcdcc000000-7fcdcc021000 rw-p 00000000 00:00 0
7fcdcc021000-7fcdd0000000 ---p 00000000 00:00 0
7fcdd0000000-7fcdd0021000 rw-p 00000000 00:00 0
7fcdd0021000-7fcdd4000000 ---p 00000000 00:00 0
7fcdd47f9000-7fcdd47fa000 ---p 00000000 00:00 0
7fcdd47fa000-7fcdd4ffa000 rw-p 00000000 00:00 0                          [stack:476]
7fcdd4ffa000-7fcdd4ffb000 ---p 00000000 00:00 0
7fcdd4ffb000-7fcdd57fb000 rw-p 00000000 00:00 0                          [stack:475]
7fcdd57fb000-7fcdd57fc000 ---p 00000000 00:00 0
7fcdd57fc000-7fcdd5ffc000 rw-p 00000000 00:00 0                          [stack:473]
7fcdd5ffc000-7fcdd5ffd000 ---p 00000000 00:00 0
7fcdd5ffd000-7fcdd67fd000 rw-p 00000000 00:00 0                          [stack:472]
7fcdd67fd000-7fcdd67fe000 ---p 00000000 00:00 0
7fcdd67fe000-7fcdd6ffe000 rw-p 00000000 00:00 0                          [stack:471]
7fcdd6ffe000-7fcdd6fff000 ---p 00000000 00:00 0
7fcdd6fff000-7fcdd77ff000 rw-p 00000000 00:00 0                          [stack:470]
7fcdd77ff000-7fcdd7800000 ---p 00000000 00:00 0
7fcdd7800000-7fcdd8000000 rw-p 00000000 00:00 0                          [stack:469]
7fcdd8000000-7fcdd8021000 rw-p 00000000 00:00 0
7fcdd8021000-7fcddc000000 ---p 00000000 00:00 0
7fcddc231000-7fcddc232000 ---p 00000000 00:00 0
7fcddc232000-7fcddcc58000 rw-p 00000000 00:00 0                          [stack:468]
7fcddcc58000-7fcddcc59000 ---p 00000000 00:00 0
7fcddcc59000-7fcddd459000 rw-p 00000000 00:00 0                          [stack:466]
7fcddd459000-7fcddd45a000 ---p 00000000 00:00 0
7fcddd45a000-7fcdddc5a000 rw-p 00000000 00:00 0                          [stack:465]
7fcdddc5a000-7fcdddc5b000 ---p 00000000 00:00 0
7fcdddc5b000-7fcdde45b000 rw-p 00000000 00:00 0                          [stack:464]
7fcdde45b000-7fcdde45c000 ---p 00000000 00:00 0
7fcdde45c000-7fcddec5c000 rw-p 00000000 00:00 0                          [stack:463]
7fcddec5c000-7fcddec5d000 ---p 00000000 00:00 0
7fcddec5d000-7fcddf45d000 rw-p 00000000 00:00 0                          [stack:462]
7fcddf45d000-7fcddf45e000 ---p 00000000 00:00 0
7fcddf45e000-7fcddfc5e000 rw-p 00000000 00:00 0                          [stack:461]
7fcddfc5e000-7fcddfc5f000 ---p 00000000 00:00 0
7fcddfc5f000-7fcde045f000 rw-p 00000000 00:00 0                          [stack:460]
7fcde045f000-7fcde0460000 ---p 00000000 00:00 0
7fcde0460000-7fcde0c60000 rw-p 00000000 00:00 0                          [stack:459]
7fcde0c60000-7fcde0c61000 ---p 00000000 00:00 0
7fcde0c61000-7fcde1461000 rw-p 00000000 00:00 0                          [stack:458]
7fcde1461000-7fcde1462000 ---p 00000000 00:00 0
7fcde1462000-7fcde1c62000 rw-p 00000000 00:00 0                          [stack:457]
7fcde1c62000-7fcde1c63000 ---p 00000000 00:00 0
7fcde1c63000-7fcde2559000 rw-p 00000000 00:00 0                          [stack:456]
7fcde2977000-7fce00000000 rw-p 00000000 00:00 0
7fce00000000-7fce00021000 rw-p 00000000 00:00 0
7fce00021000-7fce04000000 ---p 00000000 00:00 0
7fce04004000-7fce04005000 rw-p 00000000 00:00 0
7fce04005000-7fce04008000 rw-s 00000000 00:0a 65806162                   /[aio] (deleted)
7fce04008000-7fce0400b000 rw-s 00000000 00:0a 65806161                   /[aio] (deleted)
7fce0400b000-7fce0400e000 rw-s 00000000 00:0a 65806160                   /[aio] (deleted)
7fce0400e000-7fce04011000 rw-s 00000000 00:0a 65806159                   /[aio] (deleted)
7fce04011000-7fce04014000 rw-s 00000000 00:0a 65806158                   /[aio] (deleted)
7fce04014000-7fce04017000 rw-s 00000000 00:0a 65806157                   /[aio] (deleted)
7fce04017000-7fce056e8000 rw-p 00000000 00:00 0
7fce056e8000-7fce056eb000 rw-s 00000000 00:0a 65806156                   /[aio] (deleted)
7fce056eb000-7fce056ee000 rw-s 00000000 00:0a 65806155                   /[aio] (deleted)
7fce056ee000-7fce06448000 rw-p 00000000 00:00 0
7fce06448000-7fce06449000 ---p 00000000 00:00 0
7fce06449000-7fce06c49000 rw-p 00000000 00:00 0                          [stack:455]

7fce06c49000-7fce06c54000 r-xp 00000000 08:12 793825                     /usr/lib64/libnss_files-2.17.so
7fce06c54000-7fce06e53000 ---p 0000b000 08:12 793825                     /usr/lib64/libnss_files-2.17.so
7fce06e53000-7fce06e54000 r--p 0000a000 08:12 793825                     /usr/lib64/libnss_files-2.17.so
7fce06e54000-7fce06e55000 rw-p 0000b000 08:12 793825                     /usr/lib64/libnss_files-2.17.so
7fce06e55000-7fce0fd1c000 rw-p 00000000 00:00 0
7fce0fd1c000-7fce0fd1e000 r-xp 00000000 08:12 787140                     /usr/lib64/libfreebl3.so
7fce0fd1e000-7fce0ff1d000 ---p 00002000 08:12 787140                     /usr/lib64/libfreebl3.so
7fce0ff1d000-7fce0ff1e000 r--p 00001000 08:12 787140                     /usr/lib64/libfreebl3.so
7fce0ff1e000-7fce0ff1f000 rw-p 00002000 08:12 787140                     /usr/lib64/libfreebl3.so
7fce0ff1f000-7fce100d5000 r-xp 00000000 08:12 787147                     /usr/lib64/libc-2.17.so
7fce100d5000-7fce102d5000 ---p 001b6000 08:12 787147                     /usr/lib64/libc-2.17.so
7fce102d5000-7fce102d9000 r--p 001b6000 08:12 787147                     /usr/lib64/libc-2.17.so
7fce102d9000-7fce102db000 rw-p 001ba000 08:12 787147                     /usr/lib64/libc-2.17.so
7fce102db000-7fce102e0000 rw-p 00000000 00:00 0
7fce102e0000-7fce102f5000 r-xp 00000000 08:12 799105                     /usr/lib64/libgcc_s-4.8.3-20140911.so.1
7fce102f5000-7fce104f4000 ---p 00015000 08:12 799105                     /usr/lib64/libgcc_s-4.8.3-20140911.so.1
7fce104f4000-7fce104f5000 r--p 00014000 08:12 799105                     /usr/lib64/libgcc_s-4.8.3-20140911.so.1
7fce104f5000-7fce104f6000 rw-p 00015000 08:12 799105                     /usr/lib64/libgcc_s-4.8.3-20140911.so.1
7fce104f6000-7fce105f7000 r-xp 00000000 08:12 793822                     /usr/lib64/libm-2.17.so
7fce105f7000-7fce107f6000 ---p 00101000 08:12 793822                     /usr/lib64/libm-2.17.so
7fce107f6000-7fce107f7000 r--p 00100000 08:12 793822                     /usr/lib64/libm-2.17.so
7fce107f7000-7fce107f8000 rw-p 00101000 08:12 793822                     /usr/lib64/libm-2.17.so
7fce107f8000-7fce108e1000 r-xp 00000000 08:12 790225                     /usr/lib64/libstdc++.so.6.0.19
7fce108e1000-7fce10ae0000 ---p 000e9000 08:12 790225                     /usr/lib64/libstdc++.so.6.0.19
7fce10ae0000-7fce10ae8000 r--p 000e8000 08:12 790225                     /usr/lib64/libstdc++.so.6.0.19
7fce10ae8000-7fce10aea000 rw-p 000f0000 08:12 790225                     /usr/lib64/libstdc++.so.6.0.19
7fce10aea000-7fce10aff000 rw-p 00000000 00:00 0
7fce10aff000-7fce10b06000 r-xp 00000000 08:12 793828                     /usr/lib64/librt-2.17.so
7fce10b06000-7fce10d05000 ---p 00007000 08:12 793828                     /usr/lib64/librt-2.17.so
7fce10d05000-7fce10d06000 r--p 00006000 08:12 793828                     /usr/lib64/librt-2.17.so
7fce10d06000-7fce10d07000 rw-p 00007000 08:12 793828                     /usr/lib64/librt-2.17.so
7fce10d07000-7fce10d0a000 r-xp 00000000 08:12 793821                     /usr/lib64/libdl-2.17.so
7fce10d0a000-7fce10f09000 ---p 00003000 08:12 793821                     /usr/lib64/libdl-2.17.so
7fce10f09000-7fce10f0a000 r--p 00002000 08:12 793821                     /usr/lib64/libdl-2.17.so
7fce10f0a000-7fce10f0b000 rw-p 00003000 08:12 793821                     /usr/lib64/libdl-2.17.so
7fce10f0b000-7fce10f13000 r-xp 00000000 08:12 787151                     /usr/lib64/libcrypt-2.17.so
7fce10f13000-7fce11112000 ---p 00008000 08:12 787151                     /usr/lib64/libcrypt-2.17.so
7fce11112000-7fce11113000 r--p 00007000 08:12 787151                     /usr/lib64/libcrypt-2.17.so
7fce11113000-7fce11114000 rw-p 00008000 08:12 787151                     /usr/lib64/libcrypt-2.17.so
7fce11114000-7fce11142000 rw-p 00000000 00:00 0
7fce11142000-7fce11143000 r-xp 00000000 08:12 793093                     /usr/lib64/libaio.so.1.0.1
7fce11143000-7fce11342000 ---p 00001000 08:12 793093                     /usr/lib64/libaio.so.1.0.1
7fce11342000-7fce11343000 r--p 00000000 08:12 793093                     /usr/lib64/libaio.so.1.0.1
7fce11343000-7fce11344000 rw-p 00001000 08:12 793093                     /usr/lib64/libaio.so.1.0.1
7fce11344000-7fce1135a000 r-xp 00000000 08:12 787247                     /usr/lib64/libpthread-2.17.so
7fce1135a000-7fce1155a000 ---p 00016000 08:12 787247                     /usr/lib64/libpthread-2.17.so
7fce1155a000-7fce1155b000 r--p 00016000 08:12 787247                     /usr/lib64/libpthread-2.17.so
7fce1155b000-7fce1155c000 rw-p 00017000 08:12 787247                     /usr/lib64/libpthread-2.17.so
7fce1155c000-7fce11560000 rw-p 00000000 00:00 0
7fce11560000-7fce11581000 r-xp 00000000 08:12 787196                     /usr/lib64/ld-2.17.so
7fce11581000-7fce11582000 rw-s 00000000 00:0a 65806163                   /[aio] (deleted)
7fce11582000-7fce11779000 rw-p 00000000 00:00 0
7fce11779000-7fce1177c000 rw-s 00000000 00:0a 65806154                   /[aio] (deleted)
7fce1177c000-7fce1177f000 rw-s 00000000 00:0a 65806153                   /[aio] (deleted)
7fce1177f000-7fce11780000 rw-s 00000000 00:0a 65806151                   /[aio] (deleted)
7fce11780000-7fce11781000 rw-p 00000000 00:00 0
7fce11781000-7fce11782000 r--p 00021000 08:12 787196                     /usr/lib64/ld-2.17.so
7fce11782000-7fce11783000 rw-p 00022000 08:12 787196                     /usr/lib64/ld-2.17.so
7fce11783000-7fce11784000 rw-p 00000000 00:00 0
7fffa69eb000-7fffa6a0d000 rw-p 00000000 00:00 0                          [stack]
7fffa6af0000-7fffa6af2000 r-xp 00000000 00:00 0                          [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  [vsyscall]
7fffa6af0000-7fffa6af2000 r-xp 00000000 00:00 0                          [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  [vsyscall]

As a sidenote, it's dynamic also https://dev.mysql.com/doc/refman/5.6/en/server-system-variables.html#sysvar_query_alloc_bl...

The issue is specifically with --query-alloc-block-size it seems, so please do not classify this bug as 'better resource management needed'.

These options:

--event-scheduler=ON --maximum-bulk_insert_buffer_size=1M --maximum-join_buffer_size=1M --maximum-max_heap_table_size=1M --maximum-max_join_size=1M --maximum-myisam_max_sort_file_size=1M --maximum-myisam_mmap_size=1M --maximum-myisam_sort_buffer_size=1M --maximum-optimizer_trace_max_mem_size=1M --maximum-preload_buffer_size=1M --maximum-query_alloc_block_size=1M --maximum-query_prealloc_size=1M --maximum-range_alloc_block_size=1M --maximum-read_buffer_size=1M --maximum-read_rnd_buffer_size=1M --maximum-sort_buffer_size=1M --maximum-tmp_table_size=1M --maximum-transaction_alloc_block_size=1M --maximum-transaction_prealloc_size=1M --log-output=none --sql_mode=ONLY_FULL_GROUP_BY --character-set-filesystem=ujis --profiling-history-size=24 --performance-schema-max-mutex-classes=-1125899906842624 --innodb-flush-log-at-timeout=1125899906842624 --log-slow-slave-statements=0 --query-alloc-block-size=1125899906842624 --max-execution-time=2 --innodb-purge-rseg-truncate-frequency=1125899906842624

(Which includes the query-alloc-block-size again) can produce this crash;

/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(my_print_stacktrace+0x35)[0xe8ae55]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(handle_fatal_signal+0x4a4)[0x761e54]
/lib64/libpthread.so.0(+0xf130)[0x7f4581f87130]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z18close_thread_tableP3THDPP5TABLE+0x36e)[0xc286ae]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z19close_thread_tablesP3THD+0x20b)[0xc28d3b]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_ZN22PFS_engine_table_share15check_one_tableEP3THD+0x1a4)[0xef6204]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_ZN22PFS_engine_table_share16check_all_tablesEP3THD+0x2c)[0xef62fc]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z24check_performance_schemav+0x49)[0xef3399]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z11mysqld_mainiPPc+0x156c)[0x75c88c]
/lib64/libc.so.6(__libc_start_main+0xf5)[0x7f4580b74af5]

CRASH #5 EXAMPLE

These options:

-event-scheduler=ON --maximum-bulk_insert_buffer_size=1M --maximum-join_buffer_size=1M --maximum-max_heap_table_size=1M --maximum-max_join_size=1M --maximum-myisam_max_sort_file_size=1M --maximum-myisam_mmap_size=1M --maximum-myisam_sort_buffer_size=1M --maximum-optimizer_trace_max_mem_size=1M --maximum-preload_buffer_size=1M --maximum-query_alloc_block_size=1M --maximum-query_prealloc_size=1M --maximum-range_alloc_block_size=1M --maximum-read_buffer_size=1M --maximum-read_rnd_buffer_size=1M --maximum-sort_buffer_size=1M --maximum-tmp_table_size=1M --maximum-transaction_alloc_block_size=1M --maximum-transaction_prealloc_size=1M --log-output=none --sql_mode=ONLY_FULL_GROUP_BY --character-set-filesystem=ujis --profiling-history-size=24 --performance-schema-max-mutex-classes=-1125899906842624 --innodb-flush-log-at-timeout=1125899906842624 --log-slow-slave-statements=0 --query-alloc-block-size=1125899906842624 --max-execution-time=2 --innodb-purge-rseg-truncate-frequency=1125899906842624

Including our beloved --query-alloc-block-size, can produce:

/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(my_print_stacktrace+0x35)[0xe8ae55]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(handle_fatal_signal+0x4a4)[0x761e54]
/lib64/libpthread.so.0(+0xf130)[0x7f85e545a130]
/lib64/libc.so.6(+0x7e1f6)[0x7f85e40a41f6]
/lib64/libc.so.6(__libc_malloc+0x5c)[0x7f85e40a618c]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(my_malloc+0x98)[0xe876d8]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld[0xe90cbd]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(lf_hash_search+0x141)[0xe91091]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_ZN11MDL_context21try_acquire_lock_implEP11MDL_requestPP10MDL_ticket+0x177)[0xbddad7]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_ZN11MDL_context12acquire_lockEP11MDL_requestm+0xa6)[0xbde196]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z10open_tableP3THDP10TABLE_LISTP18Open_table_context+0xc99)[0xc2a159]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z11open_tablesP3THDPP10TABLE_LISTPjjP19Prelocking_strategy+0xd16)[0xc2c0a6]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z20open_and_lock_tablesP3THDP10TABLE_LISTjP19Prelocking_strategy+0x3e)[0xc2c5fe]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_ZN22PFS_engine_table_share15check_one_tableEP3THD+0x15b)[0xef61bb]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_ZN22PFS_engine_table_share16check_all_tablesEP3THD+0x2c)[0xef62fc]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z24check_performance_schemav+0x49)[0xef3399]
/sda/mysql-5.7.8-rc-linux-glibc2.5-x86_64/bin/mysqld(_Z11mysqld_mainiPPc+0x156c)[0x75c88c]

I hope I made my case about this parameter.

On Windows:

2015-08-27T23:50:28.957740Z 0 [Warning] option 'transaction_alloc_block_size': unsigned value 1048576 adjusted to 131072
2015-08-27T23:50:28.957740Z 0 [Warning] option 'transaction_prealloc_size': unsigned value 1048576 adjusted to 131072
2015-08-27T23:50:28.957740Z 0 [Warning] option 'query_alloc_block_size': unsigned value 1125899906842624 adjusted to 4294966272

Maybe Linux specific but not OS: any?

Yes, please test on Linux as I do not use Windows.

Thank you for the feedback.

[umshastr@hod03]/export/umesh/server/binaries/mysql-advanced-5.7.9: cat docs/INFO_SRC
commit: e4928d41773503a7b93ab0886a1f5efa88a4e4e4
date: 2015-08-26 21:01:11 +0530
build-date: 2015-08-26 18:05:18 +0200
short: e4928d4
branch: mysql-5.7

MySQL source 5.7.9

bin/mysql_install_db --insecure --basedir=/export/umesh/server/binaries/mysql-advanced-5.7.9 --datadir=/export/umesh/server/binaries/mysql-advanced-5.7.9/78238 -v
bin/mysqld_safe --no-defaults --query-alloc-block-size=1125899906842624 --malloc-lib=/home/umshastr/bugs/jemalloc/lib/libjemalloc.so --basedir=/export/umesh/server/binaries/mysql-advanced-5.7.9 --datadir=/export/umesh/server/binaries/mysql-advanced-5.7.9/78238 --core-file --socket=/tmp/mysql_ushastry.sock  --port=15000 --log-error=/export/umesh/server/binaries/mysql-advanced-5.7.9/78238/log.err 2>&1 &

[umshastr@hod03]/export/umesh/server/binaries/mysql-advanced-5.7.9: gdb bin/mysqld 78238/core.8993 to core.10493 generated identical stack traces

.
(gdb) bt
#0  0x00007f7c5aac3771 in pthread_kill () from /lib64/libpthread.so.0
#1  0x000000000079f125 in handle_fatal_signal (sig=11) at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/sql/signal_handler.cc:220
#2  <signal handler called>
#3  arena_avail_comp (b=0x0, a=<synthetic pointer>) at src/arena.c:77
#4  arena_avail_tree_nsearch (key=<synthetic pointer>, rbtree=0x7f7c58c001c0) at src/arena.c:101
#5  arena_run_alloc_small_helper (binind=20, size=65536, arena=0x7f7c58c000c0) at src/arena.c:724
#6  arena_run_alloc_small (binind=20, size=65536, arena=0x7f7c58c000c0) at src/arena.c:751
#7  arena_bin_nonfull_run_get (bin=0x7f7c58c00dc0, arena=0x7f7c58c000c0) at src/arena.c:1377
#8  arena_bin_malloc_hard (arena=arena@entry=0x7f7c58c000c0, bin=bin@entry=0x7f7c58c00dc0) at src/arena.c:1423
#9  0x00007f7c5ace5eb1 in je_arena_tcache_fill_small (arena=0x7f7c58c000c0, tbin=tbin@entry=0x7f7c588062a8, binind=binind@entry=20, prof_accumbytes=prof_accumbytes@entry=0) at src/arena.c:1481
#10 0x00007f7c5ad06cbf in je_tcache_alloc_small_hard (tcache=tcache@entry=0x7f7c58806000, tbin=tbin@entry=0x7f7c588062a8, binind=binind@entry=20) at src/tcache.c:72
#11 0x00007f7c5acd9f28 in je_tcache_alloc_small (zero=false, size=1024, tcache=0x7f7c58806000) at include/jemalloc/internal/tcache.h:303
#12 je_arena_malloc (try_tcache=true, zero=false, size=140172078438912, arena=0x0) at include/jemalloc/internal/arena.h:957
#13 je_imalloct (arena=0x0, try_tcache=true, size=140172078438912) at include/jemalloc/internal/jemalloc_internal.h:771
#14 je_imalloc (size=140172078438912) at include/jemalloc/internal/jemalloc_internal.h:780
#15 malloc (size=size@entry=1024) at src/jemalloc.c:929
#16 0x0000000000e5c008 in my_raw_malloc (my_flags=my_flags@entry=1040, size=1024) at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/mysys/my_malloc.c:191
#17 my_malloc (key=99, size=size@entry=992, flags=flags@entry=1040) at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/mysys/my_malloc.c:54
#18 0x0000000000e58050 in alloc_root (mem_root=0x7f7c527b8240, length=688) at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/mysys/my_alloc.c:236
#19 0x0000000001171a80 in operator new (mem_root=<optimized out>, size=688) at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/sql/sql_alloc.h:39
#20 pfs_create_handler (hton=0x7f7c40ff2920, table=0x7f7c423f2130, mem_root=<optimized out>)
    at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/storage/perfschema/ha_perfschema.cc:46
#21 0x00000000007e8aad in get_new_handler (share=share@entry=0x7f7c423f2130, alloc=alloc@entry=0x7f7c527b8240, db_type=<optimized out>)
    at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/sql/handler.cc:652
#22 0x0000000000ced378 in open_table_from_share (thd=thd@entry=0x7f7c417f0000, share=share@entry=0x7f7c423f2130, alias=0x1636b28 "events_waits_summary_by_account_by_event_name",
    db_stat=db_stat@entry=39, prgflag=prgflag@entry=8, ha_open_flags=<optimized out>, outparam=<optimized out>, outparam@entry=0x7f7c527b7a20, is_create_table=<optimized out>,
    is_create_table@entry=false) at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/sql/table.cc:2957
#23 0x0000000000c0160b in open_table (thd=thd@entry=0x7f7c417f0000, table_list=table_list@entry=0x7ffffc353170, ot_ctx=ot_ctx@entry=0x7ffffc353070)
    at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/sql/sql_base.cc:3455
#24 0x0000000000c085d2 in open_and_process_table (flags=2048, ot_ctx=0x7ffffc353070, has_prelocking_list=false, prelocking_strategy=0x7ffffc353160, counter=0x7ffffc353100,
    tables=0x7ffffc353170, lex=<optimized out>, thd=0x7f7c417f0000) at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/sql/sql_base.cc:5027
#25 open_tables (thd=thd@entry=0x7f7c417f0000, start=start@entry=0x7ffffc3530f8, counter=counter@entry=0x7ffffc353100, flags=flags@entry=2048,
    prelocking_strategy=prelocking_strategy@entry=0x7ffffc353160) at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/sql/sql_base.cc:5616
#26 0x0000000000c08e95 in open_and_lock_tables (thd=thd@entry=0x7f7c417f0000, tables=tables@entry=0x7ffffc353170, flags=flags@entry=2048,
    prelocking_strategy=prelocking_strategy@entry=0x7ffffc353160) at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/sql/sql_base.cc:6301
#27 0x0000000001185f07 in open_and_lock_tables (flags=2048, tables=0x7ffffc353170, thd=0x7f7c417f0000)
    at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/sql/sql_base.h:477
#28 PFS_engine_table_share::check_one_table (this=0x1e2b7e0 <table_ews_by_account_by_event_name::m_share>, thd=thd@entry=0x7f7c417f0000)
    at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/storage/perfschema/pfs_engine_table.cc:401
#29 0x0000000001185ffc in PFS_engine_table_share::check_all_tables (thd=0x7f7c417f0000)
    at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/storage/perfschema/pfs_engine_table.cc:347
#30 0x00000000011815ba in check_performance_schema () at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/storage/perfschema/pfs_check.cc:54
#31 0x000000000079a92d in mysqld_main (argc=11, argv=0x7f7c5881e920) at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/sql/mysqld.cc:4801
#32 0x00007f7c594aaaf5 in __libc_start_main () from /lib64/libc.so.6
#33 0x000000000078fbb5 in _start ()
(gdb)

-- with default mem alloc

bin/mysql_install_db --insecure --basedir=/export/umesh/server/binaries/mysql-advanced-5.7.9 --datadir=/export/umesh/server/binaries/mysql-advanced-5.7.9/78238 -v
bin/mysqld_safe --no-defaults --query-alloc-block-size=1125899906842624 --basedir=/export/umesh/server/binaries/mysql-advanced-5.7.9 --datadir=/export/umesh/server/binaries/mysql-advanced-5.7.9/78238 --core-file --socket=/tmp/mysql_ushastry.sock  --port=15000 --log-error=/export/umesh/server/binaries/mysql-advanced-5.7.9/78238/log.err 2>&1 &

(gdb) bt
#0  0x00007f8a3e4eb771 in pthread_kill () from /lib64/libpthread.so.0
#1  0x000000000079f125 in handle_fatal_signal (sig=11) at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/sql/signal_handler.cc:220
#2  <signal handler called>
#3  table_cache_key (record=0x32e0e40 "0\362\353\001", length=0x7fff2269b5c0, not_used=0 '\000') at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/sql/table_cache.cc:39
#4  0x0000000000e43d4c in my_hash_key (first=0 '\000', length=0x7fff2269b5c0, record=<optimized out>, hash=0x1edcd30 <table_cache_manager+48>)
    at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/mysys/hash.c:221
#5  rec_hashnr (record=<optimized out>, hash=0x1edcd30 <table_cache_manager+48>) at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/mysys/hash.c:248
#6  my_hash_insert (info=0x1edcd30 <table_cache_manager+48>, record=0x3471b60 "") at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/mysys/hash.c:435
#7  0x0000000000c02113 in add_used_table (table=0x347b410, thd=0x33062a0, this=0x1edcd00 <table_cache_manager>)
    at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/sql/table_cache.h:380
#8  open_table (thd=thd@entry=0x33062a0, table_list=table_list@entry=0x7fff2269bad0, ot_ctx=ot_ctx@entry=0x7fff2269b9d0)
    at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/sql/sql_base.cc:3496
#9  0x0000000000c085d2 in open_and_process_table (flags=2048, ot_ctx=0x7fff2269b9d0, has_prelocking_list=false, prelocking_strategy=0x7fff2269bac0, counter=0x7fff2269ba60,
    tables=0x7fff2269bad0, lex=<optimized out>, thd=0x33062a0) at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/sql/sql_base.cc:5027
#10 open_tables (thd=thd@entry=0x33062a0, start=start@entry=0x7fff2269ba58, counter=counter@entry=0x7fff2269ba60, flags=flags@entry=2048,
    prelocking_strategy=prelocking_strategy@entry=0x7fff2269bac0) at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/sql/sql_base.cc:5616
#11 0x0000000000c08e95 in open_and_lock_tables (thd=thd@entry=0x33062a0, tables=tables@entry=0x7fff2269bad0, flags=flags@entry=2048,
    prelocking_strategy=prelocking_strategy@entry=0x7fff2269bac0) at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/sql/sql_base.cc:6301
#12 0x0000000001185f07 in open_and_lock_tables (flags=2048, tables=0x7fff2269bad0, thd=0x33062a0) at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/sql/sql_base.h:477
#13 PFS_engine_table_share::check_one_table (this=0x1e2a9e0 <table_esgs_by_host_by_event_name::m_share>, thd=thd@entry=0x33062a0)
    at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/storage/perfschema/pfs_engine_table.cc:401
#14 0x0000000001185ffc in PFS_engine_table_share::check_all_tables (thd=0x33062a0)
    at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/storage/perfschema/pfs_engine_table.cc:347
#15 0x00000000011815ba in check_performance_schema () at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/storage/perfschema/pfs_check.cc:54
#16 0x000000000079a92d in mysqld_main (argc=11, argv=0x2ba0390) at /export/home2/pb2/build/sb_0-16271286-1440606484.35/mysqlcom-pro-5.7.9/sql/mysqld.cc:4801
#17 0x00007f8a3ced2af5 in __libc_start_main () from /lib64/libc.so.6
#18 0x000000000078fbb5 in _start ()
(gdb)

Crashes OPT.

Also crashes 5.6.23, but this is a different testcase (i.e. issue may be more visible in 5.7)

# mysqld options required for replay:  --query-alloc-block-size=1125899906842624
DROP DATABASE test;CREATE DATABASE test;USE test;
SELECT * FROM t1 JOIN t2 ON t1.a=t2.a WHERE t1.a=t2.a AND(t2.b>t1.a OR t1.a>t1.b);

'may': our filtering automatically deletes previously seen crashes, so it's hard to say.

Another one

# mysqld options required for replay: --sql_mode=ONLY_FULL_GROUP_BY --query-alloc-block-size=1125899906842624
DROP DATABASE test;CREATE DATABASE test;USE test;
create table t1(i int,j int)engine=TokuDB;
EXPLAIN SELECT MAX(a),1 in (SELECT b FROM t1) AS bb FROM t1;

Should this bug be hidden?

Another one - yet another crash. 

# mysqld options required for replay: --sql_mode=ONLY_FULL_GROUP_BY --query-alloc-block-size=1125899906842624
DROP DATABASE test;CREATE DATABASE test;USE test;
create table t(s1 int)engine=TokuDB partition by key (s1);

Why are so many different crashes (all consistently repeatable!) being generated?

Ref bug 78334

Posted by developer:
 
Tried it with a recent 5.7 (5.7.18).
I get the following:
s:\ade\git\mysql-5.7\bld>sql\Debug\mysqld.exe --query-alloc-block-size=1125899906842624 ...
...
2016-11-24T12:04:52.197347Z 0 [Warning] option 'query_alloc_block_size': unsigned value 1125899906842624 adjusted to 4294966272
...

So the options system is working as expected. And I'm assuming the post-5.7.8 crashes are happening with the adjusted value. Changing the bug category to reflect the individual variable and its particular maximum.