diff --git a/test/syzkaller/qos_auth/rss_threshold.txt b/test/syzkaller/qos_auth/rss_threshold.txt
new file mode 100644
index 0000000000000000000000000000000000000000..865f203b93b20684ae3d39f05d9890663a8635a0
--- /dev/null
+++ b/test/syzkaller/qos_auth/rss_threshold.txt
@@ -0,0 +1,12 @@
+include <linux/stat.h>
+include <uapi/linux/fuse.h>
+include <uapi/linux/fcntl.h>
+include <include/linux/kernfs.h>
+
+resource fd_rss_threshold[fd]
+openat$fd_rss_threshold(fd const[AT_FDCWD], file ptr[in, string["/proc/self/rss_threshold"]], flags const[O_RDWR], mode const[0]) fd_rss_threshold
+
+write$RSS_THRESHOLD(fd fd_rss_threshold, data ptr[in, int32], len bytesize[data])
+type read_rss_threshold array[int8, 1024]
+read$RSS_THRESHOLD(fd fd_rss_threshold, buf ptr[out, read_rss_threshold], len bytesize[buf])
+lseek$RSS_THRESHOLD(fd fd_rss_threshold, offset const[0x0], whence const[0x0])
\ No newline at end of file