I realize that having mysql.user empty is a very rare use case, but still I think it's not nice to just crash in the face of someone who screw his database like this.

The culprit is sql/sql_acl.cc:8159:
uint i= nr1 % acl_users.elements;