Question about whitelisting directories

Yes the endpoint is running 7.16.3. Installed from tarball elastic-agent-7.16.3-linux-x86_64.tar.gz.

When I push a default endpoint integration in a fleet policy the system load spikes and the cpu usage drops. No additional processes can be created/brought out of sleep. The resultant symptom I noticed first was I could not SSH into the system. An existent SSH connection would still function, albeit very slowly.
I recovered from this bad state by pushing a policy with the malware protections completely disabled in the endpoint integration. This relived the system load and I was able to create new SSH sessions etc.

I suppose deadlock may be a bit too severe of a word. The system performance was impaired for sure.