Hello.
I also maintain a port, bsdipa; while doing that i stumbled over what became
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=284472
Ie, ctl[2] can be negative, and if only "it is negative enough", it seems to me it can result in out-of-bound accesses in the next loop tick. (I never really tried it.)