To crash the driver is enough to use fbset on the framebuffer device to change the resolution: `fbset -xres 1920 -yres 1080 -fb /dev/fb1` What should happen instead: if the ioctl used by fbset is unsupported, the driver should not crash, but return some error to the userspace.