{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,11]],"date-time":"2026-04-11T02:13:32Z","timestamp":1775873612053,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":120,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,11,4]],"date-time":"2024-11-04T00:00:00Z","timestamp":1730678400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,11,4]]},"DOI":"10.1145\/3694715.3695944","type":"proceedings-article","created":{"date-parts":[[2024,11,15]],"date-time":"2024-11-15T19:28:18Z","timestamp":1731698898000},"page":"229-248","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["OZZ: Identifying Kernel Out-of-Order Concurrency Bugs with In-Vivo Memory Access Reordering"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7344-0830","authenticated-orcid":false,"given":"Dae R.","family":"Jeong","sequence":"first","affiliation":[{"name":"Georgia Tech, Atlanta, Georgia, USA"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-8742-3704","authenticated-orcid":false,"given":"Yewon","family":"Choi","sequence":"additional","affiliation":[{"name":"KAIST, Daejeon, Republic of Korea"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7746-0572","authenticated-orcid":false,"given":"Byoungyoung","family":"Lee","sequence":"additional","affiliation":[{"name":"Seoul National University, Seoul, Republic of Korea"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9128-2415","authenticated-orcid":false,"given":"Insik","family":"Shin","sequence":"additional","affiliation":[{"name":"KAIST, Daejeon, Republic of Korea"},{"name":"Fluiz, Daejeon, Republic of Korea"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5602-2397","authenticated-orcid":false,"given":"Youngjin","family":"Kwon","sequence":"additional","affiliation":[{"name":"KAIST, Daejeon, Republic of Korea"}]}],"member":"320","published-online":{"date-parts":[[2024,11,15]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Herding cats: Modelling, simulation, testing, and data mining for weak memory. ACM Transactions on Programming Languages and Systems (TOPLAS), 36(2): 1--74","author":"Alglave J.","year":"2014","unstructured":"J. Alglave, L. Maranget, and M. Tautschnig. Herding cats: Modelling, simulation, testing, and data mining for weak memory. ACM Transactions on Programming Languages and Systems (TOPLAS), 36(2): 1--74, 2014."},{"key":"e_1_3_2_1_2_1","volume-title":"Proceedings of the 23rd ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS)","author":"Alglave J.","year":"2018","unstructured":"J. Alglave, L. Maranget, P. E. McKenney, A. Parri, and A. Stern. Frightening small children and disconcerting grown-ups: Concurrency in the linux kernel. In Proceedings of the 23rd ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), Williamsburg, VA, Mar. 2018."},{"key":"e_1_3_2_1_3_1","volume-title":"Armed cats: Formal concurrency modelling at arm. ACM Transactions on Programming Languages and Systems (TOPLAS), 43 (2):1--54","author":"Alglave J.","year":"2021","unstructured":"J. Alglave, W. Deacon, R. Grisenthwaite, A. Hacquard, and L. Maranget. Armed cats: Formal concurrency modelling at arm. ACM Transactions on Programming Languages and Systems (TOPLAS), 43 (2):1--54, 2021."},{"key":"e_1_3_2_1_4_1","volume-title":"The RISC-V Instruction Set Manual","author":"Waterman S. Andrew","year":"2017","unstructured":"S. Andrew Waterman, Krste Asanovi\u0107. The RISC-V Instruction Set Manual, 2017. https:\/\/riscv.org\/wp-content\/uploads\/2017\/05\/riscv-spec-v2.2.pdf."},{"key":"e_1_3_2_1_5_1","volume-title":"Arm\u00ae Architecture Reference Manual for A-profile architecture","author":"Holdings ARM","year":"2022","unstructured":"ARM Holdings. Arm\u00ae Architecture Reference Manual for A-profile architecture, 2022. https:\/\/developer.arm.com\/documentation\/ddi0487\/latest."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/2485732.2485740"},{"key":"e_1_3_2_1_7_1","volume-title":"Proceedings of the 2010 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)","author":"Bond M. D.","year":"2010","unstructured":"M. D. Bond, K. E. Coons, and K. S. McKinley. Pacer: Proportional detection of data races. In Proceedings of the 2010 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI), Toronto, Canada, June 2010."},{"key":"e_1_3_2_1_8_1","volume-title":"btrfs: Fix deadlock caused by missing memory barrier","author":"Borisov N.","year":"2019","unstructured":"N. Borisov. btrfs: Fix deadlock caused by missing memory barrier, 2019. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=6e7ca09b583de4be6c27d9d4b06e8c5dd46a58fa."},{"key":"e_1_3_2_1_9_1","volume-title":"Proceedings of the 15th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS)","author":"Burckhardt S.","year":"2010","unstructured":"S. Burckhardt, P. Kothari, M. Musuvathi, and S. Nagarakatte. A randomized scheduler with probabilistic guarantees of finding bugs. In Proceedings of the 15th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), Istanbul, Turkey, Mar. 2010."},{"key":"e_1_3_2_1_10_1","volume-title":"Proceedings of the International Symposium on Software Testing and Analysis (ISSTA)","author":"Burnim J.","year":"2011","unstructured":"J. Burnim, K. Sen, and C. Stergiou. Testing concurrent programs on relaxed memory models. In Proceedings of the International Symposium on Software Testing and Analysis (ISSTA), Toronto, Canada, July 2011."},{"key":"e_1_3_2_1_11_1","volume-title":"Proceedings of the 24th ACM SIGSOFT Symposium on the Foundations of Software Engineering (FSE)","author":"Cai Y.","year":"2016","unstructured":"Y. Cai, J. Zhang, L. Cao, and J. Liu. A deployable sampling strategy for data race detection. In Proceedings of the 24th ACM SIGSOFT Symposium on the Foundations of Software Engineering (FSE), Seattle, WA, Nov. 2016."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/3241624.2926700"},{"key":"e_1_3_2_1_13_1","volume-title":"Proceedings of the 29th USENIX Security Symposium (Security)","author":"Chen H.","year":"2020","unstructured":"H. Chen, S. Guo, Y. Xue, Y. Sui, C. Zhang, Y. Li, H. Wang, and Y. Liu. MUZZ: Thread-aware grey-box fuzzing for effective bug hunting in multithreaded programs. In Proceedings of the 29th USENIX Security Symposium (Security), Virtual, Aug. 2020."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1002\/spe.4380140602"},{"key":"e_1_3_2_1_15_1","volume-title":"Alpha Architecture Reference Manual","author":"Compaq Computer Corporation","year":"2002","unstructured":"Compaq Computer Corporation. Alpha Architecture Reference Manual, 2002. https:\/\/download.majix.org\/dec\/alpha_arch_ref.pdf."},{"key":"e_1_3_2_1_16_1","volume-title":"cloc","author":"Danial A.","year":"2020","unstructured":"A. Danial. cloc, 2020. https:\/\/github.com\/AlDanial\/cloc."},{"key":"e_1_3_2_1_17_1","volume-title":"add a missing barrier in tcp_tasklet_func()","author":"Dumazet E.","year":"2016","unstructured":"E. Dumazet. tcp: add a missing barrier in tcp_tasklet_func(), 2016. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=0a9648f1293966c838dc570da73c15a76f4c89d6."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.5555\/1924943.1924954"},{"key":"e_1_3_2_1_19_1","volume-title":"Proceedings of the 2010 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)","author":"Flanagan C.","year":"2010","unstructured":"C. Flanagan and S. N. Freund. Adversarial memory for detecting destructive races. In Proceedings of the 2010 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI), Toronto, Canada, June 2010."},{"key":"e_1_3_2_1_20_1","volume-title":"Proceedings of the 11th USENIX Symposium on Operating Systems Design and Implementation (OSDI)","author":"Fonseca P.","year":"2014","unstructured":"P. Fonseca, R. Rodrigues, and B. B. Brandenburg. SKI: Exposing kernel concurrency bugs through systematic schedule exploration. In Proceedings of the 11th USENIX Symposium on Operating Systems Design and Implementation (OSDI), Broomfield, Colorado, Oct. 2014."},{"key":"e_1_3_2_1_21_1","volume-title":"Proceedings of the 28th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS)","author":"Gao M.","year":"2023","unstructured":"M. Gao, S. Chakraborty, and B. K. Ozkan. Probabilistic concurrency testing for weak memory programs. In Proceedings of the 28th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), Vancouver, Canada, Mar. 2023."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3477132.3483549"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3600006.3613148"},{"key":"e_1_3_2_1_24_1","volume-title":"Syscall description language","year":"2016","unstructured":"Google. Syscall description language, 2016. https:\/\/github.com\/llvm-mirror\/llvm\/blob\/master\/lib\/Transforms\/Instrumentation\/SanitizerCoverage.cpp."},{"key":"e_1_3_2_1_25_1","volume-title":"Syzkaller - kernel fuzzer","year":"2022","unstructured":"Google. Syzkaller - kernel fuzzer, 2022. https:\/\/github.com\/google\/syzkaller."},{"key":"e_1_3_2_1_26_1","volume-title":"Syzkaller's initial seeds","year":"2023","unstructured":"Google. Syzkaller's initial seeds, 2023. https:\/\/github.com\/google\/syzkaller\/tree\/master\/sys\/linux."},{"key":"e_1_3_2_1_27_1","unstructured":"Google. Syzbot 2024. https:\/\/syzkaller.appspot.com\/upstream."},{"key":"e_1_3_2_1_28_1","volume-title":"Proceedings of the 23rd ACM Conference on Computer and Communications Security (CCS)","author":"Han H.","year":"2017","unstructured":"H. Han and S. K. Cha. Imf: Inferred model-based fuzzer. In Proceedings of the 23rd ACM Conference on Computer and Communications Security (CCS), Dallas, Texas, Nov. 2017."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23263"},{"key":"e_1_3_2_1_30_1","volume-title":"fs: use acquire ordering in __fget_light()","author":"Horn J.","year":"2022","unstructured":"J. Horn. fs: use acquire ordering in __fget_light(), 2022. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=7ee47dcfff1835ff75a794d1075b6b5f5462cfed."},{"key":"e_1_3_2_1_31_1","volume-title":"watch_queue: Fix lack of barrier\/sync\/lock between post and read","author":"Howells D.","year":"2022","unstructured":"D. Howells. watch_queue: Fix lack of barrier\/sync\/lock between post and read, 2022. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=2ed147f015af2b48f41c6f0b6746aa9ea85c19f3."},{"key":"e_1_3_2_1_32_1","volume-title":"Proceedings of the 2013 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)","author":"Huang J.","year":"2013","unstructured":"J. Huang, C. Zhang, and J. Dolby. Clap: Recording local executions to reproduce concurrency failures. In Proceedings of the 2013 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI), Seattle, WA, June 2013."},{"key":"e_1_3_2_1_33_1","volume-title":"Proceedings of the 2017 USENIX Annual Technical Conference (ATC)","author":"Huang S.","year":"2017","unstructured":"S. Huang, B. Cai, and J. Huang. Towards Production-Run heisenbugs reproduction on commercial hardware. In Proceedings of the 2017 USENIX Annual Technical Conference (ATC), Santa Clara, CA, July 2017."},{"key":"e_1_3_2_1_34_1","volume-title":"Intel\u00ae 64 and IA-32 Architectures Software Developer Manuals","author":"Intel Corporation","year":"2022","unstructured":"Intel Corporation. Intel\u00ae 64 and IA-32 Architectures Software Developer Manuals, 2022. https:\/\/www.intel.com\/content\/www\/us\/en\/developer\/articles\/technical\/intel-sdm.html."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"crossref","first-page":"178","DOI":"10.1109\/ISSRE.2018.00028","volume-title":"2018 IEEE 29th International Symposium on Software Reliability Engineering (ISSRE)","author":"Islam M. M.","year":"2018","unstructured":"M. M. Islam and A. Muzahid. Bugaroo: Exposing memory model bugs in many-core systems. In 2018 IEEE 29th International Symposium on Software Reliability Engineering (ISSRE), pages 178--188. IEEE, 2018."},{"key":"e_1_3_2_1_36_1","volume-title":"ipv6: Fix data races around sk->sk_prot","author":"Iwashima K.","year":"2022","unstructured":"K. Iwashima. ipv6: Fix data races around sk->sk_prot., 2022. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=364f997b5cfe1db0d63a390fe7c801fa2b3115f6."},{"key":"e_1_3_2_1_37_1","volume-title":"Bird: Race detection in software binaries under relaxed memory models. ACM Transactions on Software Engineering and Methodology (TOSEM), 31(4):1--29","author":"Jain R.","year":"2022","unstructured":"R. Jain, R. Purandare, and S. Sharma. Bird: Race detection in software binaries under relaxed memory models. ACM Transactions on Software Engineering and Methodology (TOSEM), 31(4):1--29, 2022."},{"key":"e_1_3_2_1_38_1","volume-title":"Proceedings of the 32nd USENIX Security Symposium (Security)","author":"Jang J.","year":"2023","unstructured":"J. Jang, M. Kang, and D. Song. Reusb: Replay-guided usb driver fuzzing. In Proceedings of the 32nd USENIX Security Symposium (Security), Anaheim, CA, Aug. 2023."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00017"},{"key":"e_1_3_2_1_40_1","volume-title":"Proceedings of the 18th European Conference on Computer Systems (EuroSys)","author":"Jeong D. R.","year":"2023","unstructured":"D. R. Jeong, M. Jung, Y. Lee, B. Lee, I. Shin, and Y. Kwon. Diagnosing kernel concurrency failures with aitia. In Proceedings of the 18th European Conference on Computer Systems (EuroSys), Rome, Italy, May 2023."},{"key":"e_1_3_2_1_41_1","volume-title":"Proceedings of the 44th IEEE Symposium on Security and Privacy (Oakland)","author":"Jeong D. R.","year":"2023","unstructured":"D. R. Jeong, B. Lee, I. Shin, and Y. Kwon. SegFuzz: Segmentizing thread interleaving to discover kernel concurrency bugs through fuzzing. In Proceedings of the 44th IEEE Symposium on Security and Privacy (Oakland), San Francisco, CA, May 2023."},{"key":"e_1_3_2_1_42_1","volume-title":"Proceedings of the 33rd IEEE\/ACM International Conference on Automated Software Engineering (ASE)","author":"Jiang Z.","year":"2023","unstructured":"Z. Jiang, M. Wen, Y. Yang, C. Peng, P. Yang, and H. Jin. Effective concurrency testing for go via directional primitive-constrained interleaving exploration. In Proceedings of the 33rd IEEE\/ACM International Conference on Automated Software Engineering (ASE), Kirchberg, Luxembourg, Sept. 2023."},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.24296"},{"key":"e_1_3_2_1_44_1","volume-title":"Proceedings of the 2010 Annual ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA)","author":"Jin G.","year":"2010","unstructured":"G. Jin, A. Thakur, B. Liblit, and S. Lu. Instrumentation and sampling strategies for cooperative concurrency bug isolation. In Proceedings of the 2010 Annual ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA), Reno, NV, Oct. 2010."},{"key":"e_1_3_2_1_45_1","volume-title":"Proceedings of the 2023 Annual ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA)","author":"Jung J.","year":"2023","unstructured":"J. Jung, J. Lee, J. Choi, J. Kim, S. Park, and J. Kang. Modular verification of safe memory reclamation in concurrent separation logic. In Proceedings of the 2023 Annual ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA), Cascais, Portugal, Oct. 2023."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3558481.3591102"},{"key":"e_1_3_2_1_47_1","volume-title":"Proceedings of the 2020 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)","author":"Kang J.","year":"2020","unstructured":"J. Kang and J. Jung. A marriage of pointer-and epoch-based reclamation. In Proceedings of the 2020 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI), Virtual, June 2020."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/2150976.2150997"},{"key":"e_1_3_2_1_49_1","volume-title":"Automated classification of data races under both strong and weak memory models. ACM Transactions on Programming Languages and Systems (TOPLAS), 37 (3):1--44","author":"Kasikci B.","year":"2015","unstructured":"B. Kasikci, C. Zamfir, and G. Candea. Automated classification of data races under both strong and weak memory models. ACM Transactions on Programming Languages and Systems (TOPLAS), 37 (3):1--44, 2015."},{"key":"e_1_3_2_1_50_1","volume-title":"improve lockless access safety of tls_err_abort()","author":"Kicinski J.","year":"2023","unstructured":"J. Kicinski. tls: improve lockless access safety of tls_err_abort(), 2023. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=8a0d57df8938e9fd2e99d47a85b7f37d86f91097."},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24018"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833593"},{"key":"e_1_3_2_1_53_1","volume-title":"Proceedings of the 32nd USENIX Security Symposium (Security)","author":"Kim K.","year":"2023","unstructured":"K. Kim, S. Kim, K. R. Butler, A. Bianchi, R. Kennell, and D. J. Tian. Fuzz The Power: Dual-role state guided black-box fuzzing for USB power delivery. In Proceedings of the 32nd USENIX Security Symposium (Security), Anaheim, CA, Aug. 2023."},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/3341301.3359662"},{"key":"e_1_3_2_1_55_1","volume-title":"Proceedings of the 32nd USENIX Security Symposium (Security)","author":"Kim T. E.","year":"2023","unstructured":"T. E. Kim, J. Choi, K. Heo, and S. K. Cha. DAFL: Directed grey-box fuzzing guided by data dependency. In Proceedings of the 32nd USENIX Security Symposium (Security), Anaheim, CA, Aug. 2023."},{"key":"e_1_3_2_1_56_1","volume-title":"Proceedings of the 24th ACM Conference on Computer and Communications Security (CCS)","author":"Klees G.","year":"2018","unstructured":"G. Klees, A. Ruef, B. Cooper, S. Wei, and M. Hicks. Evaluating fuzz testing. In Proceedings of the 24th ACM Conference on Computer and Communications Security (CCS), Toronto, Canada, Oct. 2018."},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-81685-8_20"},{"key":"e_1_3_2_1_58_1","volume-title":"Proceedings of the 2023 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)","author":"Lee S.-H.","year":"2023","unstructured":"S.-H. Lee, M. Cho, R. Margalit, C.-K. Hur, and O. Lahav. Putting weak memory in order via a promising intermediate representation. In Proceedings of the 2023 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI), Orlando, FL, June 2023."},{"key":"e_1_3_2_1_59_1","volume-title":"Proceedings of the 30th USENIX Security Symposium (Security)","author":"Lee Y.","year":"2021","unstructured":"Y. Lee, C. Min, and B. Lee. ExpRace: Exploiting kernel races through raising interrupts. In Proceedings of the 30th USENIX Security Symposium (Security), Virtual, Aug. 2021."},{"key":"e_1_3_2_1_60_1","volume-title":"order READ\/WRITE freed instance and setting clear bit","author":"Lei M.","year":"2019","unstructured":"M. Lei. sbitmap: order READ\/WRITE freed instance and setting clear bit, 2019. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=e6d1fa584e0dd9bfebaf345e9feea588cf75ead2."},{"key":"e_1_3_2_1_61_1","volume-title":"Proceedings of the 18th European Conference on Computer Systems (EuroSys)","author":"Lepers B.","year":"2023","unstructured":"B. Lepers, J. Giet, W. Zwaenepoel, and J. Lawall. Ofence: Pairing barriers to find concurrency bugs in the linux kernel. In Proceedings of the 18th European Conference on Computer Systems (EuroSys), Rome, Italy, May 2023."},{"key":"e_1_3_2_1_62_1","volume-title":"mm\/filemap: avoid buffered read\/write race to read inconsistent data","author":"Li B.","year":"2023","unstructured":"B. Li. mm\/filemap: avoid buffered read\/write race to read inconsistent data, 2023. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=e2c27b803bb664748e090d99042ac128b3f88d92."},{"key":"e_1_3_2_1_63_1","volume-title":"Proceedings of the 27th ACM Symposium on Operating Systems Principles (SOSP)","author":"Li G.","year":"2019","unstructured":"G. Li, S. Lu, M. Musuvathi, S. Nath, and R. Padhye. Efficient scalable thread-safety-violation detection: finding thousands of concurrency bugs during testing. In Proceedings of the 27th ACM Symposium on Operating Systems Principles (SOSP), Huntsville, Ontario, Canada, Oct. 2019."},{"key":"e_1_3_2_1_64_1","volume-title":"Proceedings of the 2019 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)","author":"Lidbury C.","year":"2019","unstructured":"C. Lidbury and A. F. Donaldson. Sparse record and replay with controlled scheduling. In Proceedings of the 2019 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI), Phoenix, AZ, June 2019."},{"key":"e_1_3_2_1_65_1","volume-title":"The kernel concurrency sanitizer (KCSAN)","year":"2020","unstructured":"Linux. The kernel concurrency sanitizer (KCSAN), 2020. https:\/\/docs.kernel.org\/dev-tools\/kcsan.html."},{"key":"e_1_3_2_1_66_1","volume-title":"The Kernel Address Sanitizer (KASAN)","year":"2022","unstructured":"Linux. The Kernel Address Sanitizer (KASAN), 2022. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/tree\/Documentation\/dev-tools\/kasan.rst."},{"key":"e_1_3_2_1_67_1","volume-title":"kcov: code coverage for fuzzing","year":"2022","unstructured":"Linux. kcov: code coverage for fuzzing, 2022. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/tree\/Documentation\/dev-tools\/kcov.rst."},{"key":"e_1_3_2_1_68_1","volume-title":"Runtime locking correctness validator","year":"2022","unstructured":"Linux. Runtime locking correctness validator, 2022. https:\/\/www.kernel.org\/doc\/Documentation\/locking\/lockdep-design.txt."},{"key":"e_1_3_2_1_69_1","volume-title":"The Undefined Behavior Sanitizer - UBSAN","year":"2022","unstructured":"Linux. The Undefined Behavior Sanitizer - UBSAN, 2022. https:\/\/www.kernel.org\/doc\/Documentation\/dev-tools\/ubsan.rst."},{"key":"e_1_3_2_1_70_1","volume-title":"The LLVM Compiler Infrastructure","author":"Project LLVM","year":"2021","unstructured":"LLVM Project. The LLVM Compiler Infrastructure, 2021. https:\/\/llvm.org\/."},{"key":"e_1_3_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1145\/3445814.3446711"},{"key":"e_1_3_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2019.2946563"},{"key":"e_1_3_2_1_73_1","volume-title":"Proceedings of the 2009 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)","author":"Marino D.","year":"2009","unstructured":"D. Marino, M. Musuvathi, and S. Narayanasamy. Literace: Effective sampling for lightweight data-race detection. In Proceedings of the 2009 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI), Dublin, Ireland, June 2009."},{"key":"e_1_3_2_1_74_1","volume-title":"Proceedings of the 1996 USENIX Annual Technical Conference (ATC)","author":"McVoy L. W.","year":"1996","unstructured":"L. W. McVoy, C. Staelin, et al. Lmbench: Portable tools for performance analysis. In Proceedings of the 1996 USENIX Annual Technical Conference (ATC), Jan. 1996."},{"key":"e_1_3_2_1_75_1","volume-title":"Proceedings of the 45th IEEE Symposium on Security and Privacy (Oakland)","author":"Min J.","year":"2024","unstructured":"J. Min, D. Yu, S. Jeong, D. Song, and Y. Jeon. Erasan: Efficient rust address sanitizer. In Proceedings of the 45th IEEE Symposium on Security and Privacy (Oakland), San Francisco, CA, May 2024."},{"key":"e_1_3_2_1_76_1","volume-title":"Proceedings of the 2020 Annual ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA)","author":"Mukherjee S.","year":"2020","unstructured":"S. Mukherjee, P. Deligiannis, A. Biswas, and A. Lal. Learning-based controlled concurrency testing. In Proceedings of the 2020 Annual ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA), Virtual, Sept. 2020."},{"key":"e_1_3_2_1_77_1","volume-title":"Proceedings of the 8th USENIX Symposium on Operating Systems Design and Implementation (OSDI)","author":"Musuvathi M.","year":"2008","unstructured":"M. Musuvathi, S. Qadeer, T. Ball, G. Basler, P. A. Nainar, and I. Neamtiu. Finding and reproducing heisenbugs in concurrent programs. In Proceedings of the 8th USENIX Symposium on Operating Systems Design and Implementation (OSDI), San Diego, CA, Dec. 2008."},{"key":"e_1_3_2_1_78_1","volume-title":"nbd: fix null-ptr-dereference while accessing 'nbd->config","author":"Nan L.","year":"2023","unstructured":"L. Nan. nbd: fix null-ptr-dereference while accessing 'nbd->config', 2023. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=c2da049f419417808466c529999170f5c3ef7d3d."},{"key":"e_1_3_2_1_79_1","volume-title":"Proceedings of the 2007 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)","author":"Nethercote N.","year":"2007","unstructured":"N. Nethercote and J. Seward. Valgrind: a framework for heavyweight dynamic binary instrumentation. In Proceedings of the 2007 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI), San Diego, CA, June 2007."},{"key":"e_1_3_2_1_80_1","volume-title":"Proceedings of the 24th Annual ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA)","author":"Norris B.","year":"2013","unstructured":"B. Norris and B. Demsky. Cdschecker: checking concurrent data structures written with c\/c++ atomics. In Proceedings of the 24th Annual ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA), Indianapolis, IN, Oct. 2013."},{"key":"e_1_3_2_1_81_1","volume-title":"Proceedings of the 9th ACM Symposium on Principles and Practice of Parallel Programming (PPOPP)","author":"O'callahan R.","year":"2003","unstructured":"R. O'callahan and J.-D. Choi. Hybrid dynamic data race detection. In Proceedings of the 9th ACM Symposium on Principles and Practice of Parallel Programming (PPOPP), San Diego, CA, June 2003."},{"key":"e_1_3_2_1_82_1","volume-title":"memorder fix","author":"Piggin N.","year":"2007","unstructured":"N. Piggin. [PATCH] buffer: memorder fix, 2007. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=72ed3d035855841ad611ee48b20909e9619d4a79."},{"key":"e_1_3_2_1_83_1","volume-title":"QEMU: A generic and open source machine emulator and virtualizer","author":"QEMU.","year":"2021","unstructured":"QEMU. QEMU: A generic and open source machine emulator and virtualizer, 2021. https:\/\/www.qemu.org\/."},{"key":"e_1_3_2_1_84_1","volume-title":"Rust for Linux","author":"Linux Rust","year":"2022","unstructured":"Rust for Linux. Rust for Linux, 2022. https:\/\/rust-for-linux.com\/#rust-for-linux."},{"key":"e_1_3_2_1_85_1","volume-title":"Add missing read barriers","author":"Saleem S.","year":"2023","unstructured":"S. Saleem. RDMA\/irdma: Add missing read barriers, 2023. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=4984eb51453ff7eddee9e5ce816145be39c0ec5c."},{"key":"e_1_3_2_1_86_1","volume-title":"Proceedings of the 2011 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)","author":"Sarkar S.","year":"2011","unstructured":"S. Sarkar, P. Sewell, J. Alglave, L. Maranget, and D. Williams. Understanding power multiprocessors. In Proceedings of the 2011 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI), San Jose, CA, June 2011."},{"key":"e_1_3_2_1_87_1","doi-asserted-by":"publisher","DOI":"10.1145\/1791194.1791203"},{"key":"e_1_3_2_1_88_1","volume-title":"Proceedings of the 2012 USENIX Annual Technical Conference (ATC)","author":"Serebryany K.","year":"2012","unstructured":"K. Serebryany, D. Bruening, A. Potapenko, and D. Vyukov. AddressSanitizer: A fast address sanity checker. In Proceedings of the 2012 USENIX Annual Technical Conference (ATC), Boston, MA, June 2012."},{"key":"e_1_3_2_1_89_1","volume-title":"net\/tls: Annotate access to sk_prot with READ_-ONCE\/WRITE_ONCE","author":"Sitnicki J.","year":"2020","unstructured":"J. Sitnicki. net\/tls: Annotate access to sk_prot with READ_-ONCE\/WRITE_ONCE, 2020. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=d5bee7374b68de3c44586d46e9e61ffc97a1e886."},{"key":"e_1_3_2_1_90_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23176"},{"key":"e_1_3_2_1_91_1","volume-title":"Proceedings of the 40th IEEE Symposium on Security and Privacy (Oakland)","author":"Song D.","year":"2019","unstructured":"D. Song, J. Lettner, P. Rajasekaran, Y. Na, S. Volckaert, P. Larsen, and M. Franz. Sok: Sanitizing for security. In Proceedings of the 40th IEEE Symposium on Security and Privacy (Oakland), San Francisco, CA, May 2019."},{"key":"e_1_3_2_1_92_1","volume-title":"Proceedings of the 29th USENIX Security Symposium (Security)","author":"Song D.","year":"2020","unstructured":"D. Song, F. Hetzelt, J. Kim, B. B. Kang, J.-P. Seifert, and M. Franz. Agamotto: Accelerating kernel driver fuzzing with lightweight virtual machine checkpoints. In Proceedings of the 29th USENIX Security Symposium (Security), Virtual, Aug. 2020."},{"key":"e_1_3_2_1_93_1","doi-asserted-by":"publisher","DOI":"10.1109\/CGO.2015.7054186"},{"key":"e_1_3_2_1_94_1","volume-title":"Explanation of the Linux-Kernel Memory Consistency Model","author":"Stern A.","year":"2017","unstructured":"A. Stern. Explanation of the Linux-Kernel Memory Consistency Model, 2017. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/tree\/tools\/memory-model\/Documentation\/explanation.txt."},{"key":"e_1_3_2_1_95_1","volume-title":"core: Fix hang in usb_kill_urb by adding memory barriers","author":"Stern A.","year":"2022","unstructured":"A. Stern. USB: core: Fix hang in usb_kill_urb by adding memory barriers, 2022. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=26fbe9772b8c459687930511444ce443011f86bf."},{"key":"e_1_3_2_1_96_1","volume-title":"Proceedings of the 18th European Conference on Computer Systems (EuroSys)","author":"Stoica B. A.","year":"2023","unstructured":"B. A. Stoica, S. Lu, M. Musuvathi, and S. Nath. WAFFLE: Exposing memory ordering bugs efficiently with active delay injection. In Proceedings of the 18th European Conference on Computer Systems (EuroSys), Rome, Italy, May 2023."},{"key":"e_1_3_2_1_97_1","doi-asserted-by":"publisher","DOI":"10.1145\/3477132.3483547"},{"key":"e_1_3_2_1_98_1","volume-title":"Proceedings of the 2022 USENIX Annual Technical Conference (ATC)","author":"Sun H.","year":"2022","unstructured":"H. Sun, Y. Shen, J. Liu, Y. Xu, and Y. Jiang. KSG: Augmenting kernel fuzzing with system call specification generation. In Proceedings of the 2022 USENIX Annual Technical Conference (ATC), Carlsbad, CA, July 2022."},{"key":"e_1_3_2_1_99_1","doi-asserted-by":"publisher","DOI":"10.1145\/2555243.2555260"},{"key":"e_1_3_2_1_100_1","volume-title":"IBM Journal of research and Development, 11(1):25--33","author":"Tomasulo R. M.","year":"1967","unstructured":"R. M. Tomasulo. An efficient algorithm for exploiting multiple arithmetic units. IBM Journal of research and Development, 11(1):25--33, 1967."},{"key":"e_1_3_2_1_101_1","volume-title":"use state member for socket synchronization","author":"T\u00f6pel B.","year":"2019","unstructured":"B. T\u00f6pel. xsk: use state member for socket synchronization, 2019. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=42fddcc7c64b723a867c7b2f5f7505e244212f13."},{"key":"e_1_3_2_1_102_1","unstructured":"L. Torvalds. Merge tag 'rust-v6.1-rc1' of https:\/\/github.com\/rust-for-linux\/linux 2022. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=8aebac82933ff1a7c8eede18cab11e1115e2062b."},{"key":"e_1_3_2_1_103_1","volume-title":"xsk: add missing write- and data-dependency barrier","author":"T\u00f6pel B.","year":"2018","unstructured":"B. T\u00f6pel. xsk: add missing write- and data-dependency barrier, 2018. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=37b076933a8e38e72ffd3c40d3eeb5949f38baf3."},{"key":"e_1_3_2_1_104_1","volume-title":"Proceedings of the seventh international conference on Parallel and Distributed Computing Systems. Citeseer","author":"Valois J. D.","year":"1994","unstructured":"J. D. Valois. Implementing lock-free queues. In Proceedings of the seventh international conference on Parallel and Distributed Computing Systems. Citeseer, 1994."},{"key":"e_1_3_2_1_105_1","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043590"},{"key":"e_1_3_2_1_106_1","unstructured":"A. Viro. missing barriers in some of unix_sock ->addr and ->path accesses 2019. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=ae3b564179bfd06f32d051b9e5d72ce4b2a07c37."},{"key":"e_1_3_2_1_107_1","unstructured":"B. Wang. Arm-based PCs to Nearly Double Market Share by 2027 2023. https:\/\/www.counterpointresearch.com\/insights\/arm-based-pcs-to-nearly-double-market-share-by-2027\/."},{"key":"e_1_3_2_1_108_1","volume-title":"Proceedings of the 30th USENIX Security Symposium (Security)","author":"Wang D.","year":"2021","unstructured":"D. Wang, Z. Zhang, H. Zhang, Z. Qian, S. V. Krishnamurthy, and N. Abu-Ghazaleh. SyzVegas: Beating kernel fuzzing odds with reinforcement learning. In Proceedings of the 30th USENIX Security Symposium (Security), Virtual, Aug. 2021."},{"key":"e_1_3_2_1_109_1","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA.2001.903248"},{"key":"e_1_3_2_1_110_1","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA.2002.995709"},{"key":"e_1_3_2_1_111_1","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510178"},{"key":"e_1_3_2_1_112_1","volume-title":"Proceedings of the 29th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS)","author":"Wolff D.","year":"2024","unstructured":"D. Wolff, S. Zheng, G. Duck, U. Mathur, and A. Roychoudhury. Greybox fuzzing for concurrency testing. In Proceedings of the 29th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), San Diego, CA, Apr.--May 2024."},{"key":"e_1_3_2_1_113_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00078"},{"key":"e_1_3_2_1_114_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00035"},{"key":"e_1_3_2_1_115_1","volume-title":"ring-buffer: Fix race while reader and writer are on the same page","author":"Yejian Z.","year":"2023","unstructured":"Z. Yejian. ring-buffer: Fix race while reader and writer are on the same page, 2023. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=6455b6163d8c680366663cdb8c679514d55fc30c."},{"key":"e_1_3_2_1_116_1","volume-title":"Proceedings of the 32nd USENIX Security Symposium (Security)","author":"Yuan M.","year":"2023","unstructured":"M. Yuan, B. Zhao, P. Li, J. Liang, X. Han, X. Luo, and C. Zhang. DDRace: finding concurrency uaf vulnerabilities in linux drivers with directed fuzzing. In Proceedings of the 32nd USENIX Security Symposium (Security), Anaheim, CA, Aug. 2023."},{"key":"e_1_3_2_1_117_1","volume-title":"Proceedings of the 27th USENIX Security Symposium (Security)","author":"Yun I.","year":"2018","unstructured":"I. Yun, S. Lee, M. Xu, Y. Jang, and T. Kim. QSYM: A practical concolic execution engine tailored for hybrid fuzzing. In Proceedings of the 27th USENIX Security Symposium (Security), Baltimore, MD, Aug. 2018."},{"key":"e_1_3_2_1_118_1","doi-asserted-by":"publisher","DOI":"10.1145\/2872362.2872384"},{"key":"e_1_3_2_1_119_1","volume-title":"Proceedings of the 22nd ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), Xi'an","author":"Zhang T.","year":"2017","unstructured":"T. Zhang, C. Jung, and D. Lee. Prorace: Practical data race detection for production use. In Proceedings of the 22nd ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), Xi'an, China, Apr. 2017."},{"key":"e_1_3_2_1_120_1","volume-title":"fix a data race when get vlan device","author":"Zhu D.","year":"2021","unstructured":"D. Zhu. net: fix a data race when get vlan device, 2021. https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=c1102e9d49eb36c0be18cb3e16f6e46ffb717964."}],"event":{"name":"SOSP '24: ACM SIGOPS 30th Symposium on Operating Systems Principles","location":"Austin TX USA","acronym":"SOSP '24","sponsor":["SIGOPS ACM Special Interest Group on Operating Systems","USENIX"]},"container-title":["Proceedings of the ACM SIGOPS 30th Symposium on Operating Systems Principles"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3694715.3695944","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3694715.3695944","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T00:05:47Z","timestamp":1750291547000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3694715.3695944"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,11,4]]},"references-count":120,"alternative-id":["10.1145\/3694715.3695944","10.1145\/3694715"],"URL":"https:\/\/doi.org\/10.1145\/3694715.3695944","relation":{},"subject":[],"published":{"date-parts":[[2024,11,4]]},"assertion":[{"value":"2024-11-15","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}