Function fuzz_syscall 

pub fn fuzz_syscall(nr: u64, a0: u64, a1: u64, a2: u64) -> i64

Issue a RAW syscall with an arbitrary number and arguments and return the raw i64 result. This is the fuzz/adversarial entry point (F1/F2/A10/A15 …): the kernel validates every syscall, so from the caller’s side this is memory-safe - it never dereferences anything itself. A bad pointer passed as a1 is the KERNEL’s to validate and reject (or to attribute to this caller and kill it); it can never corrupt this task’s memory. The unsafe is purely the inline-asm ABI trap, which is sound for any argument values, so it is isolated in [crate::syscall::raw_syscall] and wrapped safely here.