It seems Glibc 2.28 removed sys/ustat.h and hence libsanitize in GCC 4.9.4 fails compiling. If I disable the sanitize USE flag, GCC 4.9.4 builds with Glibc 2.28. There is a patch in the buildroot project that we might use - see https://github.com/buildroot/buildroot/commit/6b33b7ba517bee4d88af9b1827201df923b4a600 I didn't have time to test now. I know that GCC 4.9.4 is old, but until it is removed, it should build with the default use flags IMHO.
Backporting the change makes sense if simple. I suggest using USE=-sanitizer meanwhile.
Should be fixed in gcc-4.9.4-r1: https://gitweb.gentoo.org/repo/gentoo.git/commit/sys-devel/gcc/gcc-4.9.4-r1.ebuild?id=a499dd60299d964f49d8a1bbce0216f628a50eb4