PowerScale: isi_avscan_d Daemon Consuming CPU

Evidence in the isi_avscan_d.log of the node:

2026-03-08T19:00:25.264343-05:00 <3.6> powerscale1-9(id9) isi_avscan_d[40474]: [0x38dd70329c00] SQL error: database disk image is malformed [SELECT NumInfections FROM scans WHERE ReportID == 'RC54356553';]

Running top on the node:

powerscale1-9# top
last pid: 85092;  load averages: 45.57, 48.27, 48.99 up 152+06:10:20 15:41:59
148 processes: 2 running, 139 sleeping, 7 zombie
CPU: 97.6% user,  0.0% nice,  2.1% system,  0.4% interrupt,  0.0% idle
Mem: 395M Active, 51G Inact, 59G Wired, 32G Buf, 2535M Free

  PID USERNAME    THR PRI NICE   SIZE    RES STATE    C   TIME    WCPU COMMAND
49168 root         26  52    0    99M    20M uwait   10 399.9H 1911.19% isi_avscan_d    <<<<<<<<<<<<<<
 2556 root          3  29    0    55M  9664K kqread  17  65.0H   7.10% isi_flexnet_d
 4696 root         32  98 r150   822M   562M sigwai   3 1402.7   1.52% nfs
18268 root         15  20    0   679M   174M kqread  11  34.4H   1.46% isi_stats_d
 4334 root         12  20    0    70M    11M select  13 487.0H   1.39% isi_audit_d
 4437 root         41  98 r150   197M    33M sigwai   7 520.8H   0.90% isi_audit_cee
 2830 root          8  20    0    90M    20M kqread  13  21.2H   0.87% isi_mcp
 4398 root         11  52    0   116M    39M sigwai  17 349.3H   0.85% isi_audit_syslog
 2516 root          1  20    0    39M  8972K select   2  41.8H   0.40% syslogd
 4753 root          4  20    0    47M    10M nanslp   2  72:07   0.37% isi_snapshot_d
 2550 root          1  20    0    79M    25M select  10  87:31   0.35% isi_hangdump
 5618 root         12  52    0   538M   442M RUN     14 208.7H   0.34% isi_celog_monitor
 2989 root          1  29    0   105M    44M kqread  10 220:02   0.26% isi_hwmon

Other symptoms include AVscan jobs failing and unable to view AVscan reports. A core file might drop in /var/crash.

Locking issue introduced in OneFS 9.10 code.

There is no workaround for OneFS 9.10.1.0 through 9.10.1.5, 9.11.x, or 9.12.x, cluster will needs an upgrade to 9.10.1.6 or 9.13.x or higher. Toggle the AVscan daemon for temporary relief:

powerscale1-9# isi services -a isi_avscan_d disable; sleep 30; isi services -a isi_avscan_d enable

Release note references are IME01C-301 or IMEDF-598.

Consider migrating to a CAVA antivirus solution, which does not experience this issue.