Cause: A background script that runs as an oci pre-start hook (low-latency-hooks) for guaranteed pods sets the rps mask of all network devices visible from the root path of devices (/sys/devices). Consequence: the intent of the pre-start hook it to set the rps mask of virtual interfaces (i.e. the veth) but instead it sets the rps mask of all network devices visible in the container. Fix: Change the devices path in the script to set rps mask only for virtual interfaces. Result: Only virtual interfaces will be set with rps mask in the crio prestart hook.