diff --git a/src/core/dgram_ring.h b/src/core/dgram_ring.h
index 554b1a54..b3750a2b 100644
--- a/src/core/dgram_ring.h
+++ b/src/core/dgram_ring.h
@@ -71,7 +71,7 @@ evpl_dgram_ring_resize(struct evpl_dgram_ring *ring)
     }
 
     ring->head  = ring->size - 1;
-    ring->waist = ((ring->waist + ring->size)  - ring->tail) - ring->size;
+    ring->waist = ((ring->waist + ring->size) - ring->tail) & ring->mask;
     ring->tail  = 0;
 
     evpl_free(ring->dgram);
diff --git a/src/core/iovec_ring.h b/src/core/iovec_ring.h
index 9bd52acf..87aa7e9d 100644
--- a/src/core/iovec_ring.h
+++ b/src/core/iovec_ring.h
@@ -95,7 +95,7 @@ evpl_iovec_ring_resize(struct evpl_iovec_ring *ring)
     }
 
     ring->head  = ring->size - 1;
-    ring->waist = ((ring->waist + ring->size)  - ring->tail) - ring->size;
+    ring->waist = ((ring->waist + ring->size) - ring->tail) & ring->mask;
     ring->tail  = 0;
 
     evpl_free(old_iovec);
diff --git a/src/core/tests/CMakeLists.txt b/src/core/tests/CMakeLists.txt
index f5b53130..2d775f08 100644
--- a/src/core/tests/CMakeLists.txt
+++ b/src/core/tests/CMakeLists.txt
@@ -31,6 +31,10 @@ foreach(mech ${EVPL_MECHANISMS})
                          PROPERTIES TIMEOUT 10)
 endforeach()
 
+# Growing an iovec ring with a wrapped waist.  Drives the ring directly rather
+# than through a protocol, since the waist is only advanced by the RDMA CM one.
+unit_test(core iovec_ring_resize iovec_ring_resize.c)
+
 # Local (AF_UNIX) endpoints: addressed by socket name, so no namespace needed.
 unit_test_local(core endpoint_local endpoint_local.c)
 
diff --git a/src/core/tests/iovec_ring_resize.c b/src/core/tests/iovec_ring_resize.c
new file mode 100644
index 00000000..9e3b7be2
--- /dev/null
+++ b/src/core/tests/iovec_ring_resize.c
@@ -0,0 +1,99 @@
+// SPDX-FileCopyrightText: 2026 Ben Jarvis
+//
+// SPDX-License-Identifier: LGPL-2.1-only
+
+/*
+ * Growing an iovec ring has to carry the waist over into the new index space
+ * along with head and tail.  The waist is only moved by the RDMA CM protocol,
+ * which needs a device to exercise, so the ring is driven here directly.
+ */
+
+#include <stdio.h>
+
+#include "core/iovec_ring.h"
+
+#define RING_SIZE 8
+#define IOVEC_LEN 64
+
+int
+main(
+    int   argc,
+    char *argv[])
+{
+    struct evpl           *evpl;
+    struct evpl_iovec_ring ring;
+    struct evpl_iovec      iovec;
+    struct evpl_iovec     *waist;
+    void                  *old_entry;
+    int                    i, old_size;
+
+    evpl_init(NULL);
+
+    evpl = evpl_create(NULL);
+
+    evpl_iovec_ring_alloc(&ring, RING_SIZE, IOVEC_LEN);
+
+    for (i = 0; i < RING_SIZE - 1; i++) {
+        evpl_iovec_alloc(evpl, IOVEC_LEN, IOVEC_LEN, 1, 0, &iovec);
+        evpl_iovec_ring_add(&ring, &iovec);
+    }
+
+    /* Drain most of the ring and refill it, which leaves tail near the top of
+     * the array and head wrapped around below it. */
+    for (i = 0; i < RING_SIZE - 2; i++) {
+        evpl_iovec_release_internal(evpl, evpl_iovec_ring_tail(&ring));
+        evpl_iovec_ring_remove(&ring);
+    }
+
+    for (i = 0; i < RING_SIZE - 2; i++) {
+        evpl_iovec_alloc(evpl, IOVEC_LEN, IOVEC_LEN, 1, 0, &iovec);
+        evpl_iovec_ring_add(&ring, &iovec);
+    }
+
+    /* A waist that has wrapped as well, so it sits below tail. */
+    ring.waist = 1;
+
+    if (!evpl_iovec_ring_is_full(&ring) || ring.waist >= ring.tail) {
+        fprintf(stderr, "setup did not produce a full ring with a wrapped "
+                "waist (head %d waist %d tail %d)\n",
+                ring.head, ring.waist, ring.tail);
+        return 1;
+    }
+
+    old_size  = ring.size;
+    old_entry = ring.iovec[ring.waist].data;
+
+    /* The ring is full, so this add grows it. */
+    evpl_iovec_alloc(evpl, IOVEC_LEN, IOVEC_LEN, 1, 0, &iovec);
+    evpl_iovec_ring_add(&ring, &iovec);
+
+    if (ring.size != old_size << 1) {
+        fprintf(stderr, "ring did not grow (size %d)\n", ring.size);
+        return 1;
+    }
+
+    if (ring.waist < 0 || ring.waist >= ring.size) {
+        fprintf(stderr, "waist %d is outside a ring of %d after resize\n",
+                ring.waist, ring.size);
+        return 1;
+    }
+
+    waist = evpl_iovec_ring_waist(&ring);
+
+    if (!waist) {
+        fprintf(stderr, "waist caught up with head across the resize\n");
+        return 1;
+    }
+
+    if (waist->data != old_entry) {
+        fprintf(stderr, "waist names a different entry after resize\n");
+        return 1;
+    }
+
+    evpl_iovec_ring_clear(evpl, &ring);
+    evpl_iovec_ring_free(&ring);
+
+    evpl_destroy(evpl);
+
+    return 0;
+} /* main */