Fuzz out of bounds reads during nodelist processing

We want to make sure we fixed all the issues with nodelist processing in #19032 (moved).

arma says this could be SponsorS or SponsorU.