https://gcc.gnu.org/bugzilla/show_bug.cgi?id=122982
--- Comment #1 from qinzhao at gcc dot gnu.org ---
when changing the following:
int *p = (struct __bounded_ptr) {3, f1 (3)}.buf;
to
int *m_buf = f1 (3);
int *p = (struct __bounded_ptr) {3, m_buf}.buf;
the ICE disappeared.
