failed to bind the UNIX domain socket under qemu libvirtd

Hi all, I'm trying to dump perf counter when attaching rbd volume into KVM-Qemu guest machine. It always failed at creating asok file when starting the guest machine. Without asok file, I can' use below "ceph perf dump" to get the perf counters. The failure log is below: ||AdminSocketConfigObs::init: failed: AdminSocket::bind_and_listen: ||failed to bind the UNIX domain socket to ||'/tmp/ceph-asok_changcheng/ceph-client.libvirt.2388472.93848128323264.asok': ||(13) Permission denied Does anyone know how to sovle it? I've looked below webpage without solution. https://docs.ceph.com/docs/master/rbd/libvirt/ My host OS info is below: ||cat /etc/os-release ||NAME="Ubuntu" ||VERSION="18.04.1 LTS (Bionic Beaver)" ||ID=ubuntu ||ID_LIKE=debian ||PRETTY_NAME="Ubuntu 18.04.1 LTS" ceph.conf is below: ||[client.libvirt] ||log file = /tmp/qemu-guest-$pid.log ||admin socket = /tmp/ceph-asok_changcheng/$cluster-$type.$id.$pid.$cctid.asok Apparmor has stopped: ||liuc@aep-test02:~$ sudo aa-status ||apparmor module is loaded. ||0 profiles are loaded. ||0 profiles are in enforce mode. ||0 profiles are in complain mode. ||0 processes have profiles defined. ||0 processes are in enforce mode. ||0 processes are in complain mode. ||0 processes are unconfined but have a profile defined. ||liuc@aep-test02:~$ sudo systemctl status apparmor ||● apparmor.service - AppArmor initialization || Loaded: loaded (/lib/systemd/system/apparmor.service; disabled; vendor preset: enabled) || Active: inactive (dead) || Docs: man:apparmor(7) || http://wiki.apparmor.net/ B.R. Changcheng