https://gcc.gnu.org/bugzilla/show_bug.cgi?id=66444
--- Comment #3 from Jakub Jelinek <jakub at gcc dot gnu.org> --- The testcase has been reduced from much larger testcase, the content of the fn1 function matters only for the IPA-RA analysis, so can be changed to something else, and the other functions supposedly can be defined in a dg-additional-sources file. Though, the hardcoding of the constant in the pointer arithmetics makes it more difficult (the testcase would have to simulate there is something mapped at that address (or mmap there something - the constant can be changed to something more suitable).