The kernel is millions of lines of C, and a tool called bindgen reads its header files and mechanically produces Rust declarations for every C function and struct it finds, collected in a module named bindings. Those declarations are raw and completely unchecked: calling one is exactly as dangerous as writing C. The rule in Linux is that a driver calls the reviewed safe wrappers instead, and only the small set of abstraction authors is allowed to touch bindings directly. Ignore the rule and you lose the only thing Rust was brought in to provide, because the compiler can no longer see the rules you are breaking.
The Linux kernel is millions of lines of C, so a tool called bindgen reads its header files and mechanically produces raw Rust declarations for the C functions and types, collected in a bindings modu…