https://gcc.gnu.org/bugzilla/show_bug.cgi?id=66190
--- Comment #4 from Marek Polacek <mpolacek at gcc dot gnu.org> --- So static int & b = (int &) (UBSAN_NULL (&a, 2B, 0);, &a;); survives it to the expansion. It appears that we shouldn't instrument statics like that.