diff -Naur rhel-block-copyfail-0.5.1-orig/block_copyfail.bpf.c rhel-block-copyfail-0.5.1/block_copyfail.bpf.c
--- rhel-block-copyfail-0.5.1-orig/block_copyfail.bpf.c	2026-05-07 21:47:15.000000000 -0400
+++ rhel-block-copyfail-0.5.1/block_copyfail.bpf.c	2026-05-14 14:50:15.413356644 -0400
@@ -143,7 +143,7 @@
 	if (kern)
 		return 0;
 
-	if (family != AF_RXRPC)
+	if (family != AF_RXRPC && family != AF_ALG)
 		return 0;
 
 	emit_block_event(BLOCK_HOOK_DF);
diff -Naur rhel-block-copyfail-0.5.1-orig/block_copyfail.c rhel-block-copyfail-0.5.1/block_copyfail.c
--- rhel-block-copyfail-0.5.1-orig/block_copyfail.c	2026-05-07 21:47:15.000000000 -0400
+++ rhel-block-copyfail-0.5.1/block_copyfail.c	2026-05-14 14:51:21.801582959 -0400
@@ -37,7 +37,7 @@
 	switch (hook) {
 	case BLOCK_HOOK_CF1:   return "AF_ALG-AEAD";
 	case BLOCK_HOOK_CF2:   return "ESP-UDP-splice";
-	case BLOCK_HOOK_DF:    return "AF_RXRPC";
+	case BLOCK_HOOK_DF:    return "AF_RXRPC-AF_ALG";
 	case BLOCK_HOOK_ENCAP: return "UDP_ENCAP";
 	default:               return "unknown";
 	}
@@ -100,7 +100,7 @@
 		}
 	}
 
-	fprintf(stderr, "block-copyfail: blocker active — AF_ALG AEAD + UDP splice + AF_RXRPC%s blocked\n",
+	fprintf(stderr, "block-copyfail: blocker active — AF_ALG AEAD + UDP splice + AF_ALG + AF_RXRPC%s blocked\n",
 		use_encap_fallback ? " + UDP_ENCAP" : "");
 
 	rb = ring_buffer__new(bpf_map__fd(skel->maps.events),