https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105727
--- Comment #9 from Martin Liška <marxin at gcc dot gnu.org> --- > Sure, we might not inline or ipa cp/vrp all of them... That's the explanation as bool kasan_check_range(unsigned long addr, size_t size, bool write, unsigned long ret_ip) { return check_region_inline(addr, size, write, ret_ip); } lives in mm/kasan/generic.c and so one needs LTO in other to propagate to this call.