diff --git a/private/system_server.te b/private/system_server.te
index 7e66c5a..7cb8ac3 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -1116,6 +1116,8 @@
 allow system_server fs_bpf:dir search;
 allow system_server fs_bpf:file { read write };
 allow system_server bpfloader:bpf { map_read map_write prog_run };
+# in order to invoke side effect of close() on such a socket calling synchronize_rcu()
+allow system_server self:key_socket create;
 
 # ART Profiles.
 # Allow system_server to open profile snapshots for read.