package linux-headers-5.3.0-22-generic (not installed) failed to install/upgrade: unable to open '/usr/src/linux-headers-5.3.0-22-generic/include/config/have/kvm.h.dpkg-new': Operation not permitted

[Yamin Bismilla]

just a failed update in 19.10

ProblemType: Package
DistroRelease: Ubuntu 19.10
Package: linux-headers-5.3.0-22-generic (not installed)
ProcVersionSignature: Ubuntu 5.3.0-19.20-generic 5.3.1
Uname: Linux 5.3.0-19-generic x86_64
NonfreeKernelModules: nvidia_modeset nvidia
ApportVersion: 2.20.11-0ubuntu8.2
AptOrdering:
 linux-modules-extra-5.3.0-22-generic:amd64: Install
 linux-headers-5.3.0-22:amd64: Install
 linux-headers-5.3.0-22-generic:amd64: Install
 NULL: ConfigurePending
Architecture: amd64
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC1: gdm 1729 F.... pulseaudio
                      yamin 2092 F.... pulseaudio
 /dev/snd/controlC0: gdm 1729 F.... pulseaudio
                      yamin 2092 F.... pulseaudio
Date: Wed Nov 13 20:57:10 2019
DuplicateSignature:
 package:linux-headers-5.3.0-22-generic:(not installed)
 Unpacking linux-modules-extra-5.3.0-22-generic (5.3.0-22.24) ...
 dpkg: error processing archive /var/cache/apt/archives/linux-modules-extra-5.3.0-22-generic_5.3.0-22.24_amd64.deb (--unpack):
  unable to open '/lib/modules/5.3.0-22-generic/kernel/drivers/input/joystick/spaceball.ko.dpkg-new': Operation not permitted
ErrorMessage: unable to open '/usr/src/linux-headers-5.3.0-22-generic/include/config/have/kvm.h.dpkg-new': Operation not permitted
IwConfig:
 lo no wireless extensions.

 enp3s0 no wireless extensions.
MachineType: To Be Filled By O.E.M. To Be Filled By O.E.M.
ProcFB: 0 EFI VGA
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-5.3.0-19-generic root=UUID=ac7dec92-3af8-4532-8a50-cbbb37da60bd ro quiet splash vt.handoff=7
PulseList: Error: command ['pacmd', 'list'] failed with exit code 1: No PulseAudio daemon running, or not running as session daemon.
Python3Details: /usr/bin/python3.7, Python 3.7.5rc1, python3-minimal, 3.7.5-1
PythonDetails: /usr/bin/python2.7, Python 2.7.17rc1, python-minimal, 2.7.17-1
RelatedPackageVersions: grub-pc 2.04-1ubuntu12
RfKill:

SourcePackage: linux
Title: package linux-headers-5.3.0-22-generic (not installed) failed to install/upgrade: unable to open '/usr/src/linux-headers-5.3.0-22-generic/include/config/have/kvm.h.dpkg-new': Operation not permitted
UpgradeStatus: Upgraded to eoan on 2019-10-25 (19 days ago)
dmi.bios.date: 01/13/2016
dmi.bios.vendor: American Megatrends Inc.
dmi.bios.version: P2.40
dmi.board.name: H87M-ITX
dmi.board.vendor: ASRock
dmi.chassis.asset.tag: To Be Filled By O.E.M.
dmi.chassis.type: 3
dmi.chassis.vendor: To Be Filled By O.E.M.
dmi.chassis.version: To Be Filled By O.E.M.
dmi.modalias: dmi:bvnAmericanMegatrendsInc.:bvrP2.40:bd01/13/2016:svnToBeFilledByO.E.M.:pnToBeFilledByO.E.M.:pvrToBeFilledByO.E.M.:rvnASRock:rnH87M-ITX:rvr:cvnToBeFilledByO.E.M.:ct3:cvrToBeFilledByO.E.M.:
dmi.product.family: To Be Filled By O.E.M.
dmi.product.name: To Be Filled By O.E.M.
dmi.product.sku: To Be Filled By O.E.M.
dmi.product.version: To Be Filled By O.E.M.
dmi.sys.vendor: To Be Filled By O.E.M.

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

This change was made by a bot.

[Yamin Bismilla (yaminb)]

Solved by disabling sophos AV
sudo /opt/sophos-av/bin/savdctl disable