https://gcc.gnu.org/bugzilla/show_bug.cgi?id=81040
--- Comment #1 from Richard Biener <rguenth at gcc dot gnu.org> --- Likely instrumentation simply is missing goo((int*)&a); given 'a' lives on the stack. With static foo and IPA CP applied it eventually sees a address-taken constant pool reference.