Can you also bootstrap gcc with address sanitizer? That might help detect the error more reliably...?
This is a good idea.
Also, in my experience, restarting creduce runs from scratch after improving youroracle script etc. is kind of part of the territory...
Yep! John