diff --git a/src/osmo-bsc/lcs_loc_req.c b/src/osmo-bsc/lcs_loc_req.c
index d53f2ab1f..bb0c5e273 100644
--- a/src/osmo-bsc/lcs_loc_req.c
+++ b/src/osmo-bsc/lcs_loc_req.c
@@ -514,7 +514,8 @@ static void lcs_loc_req_failed_onenter(struct osmo_fsm_inst *fi, uint32_t prev_s
 	};
 
 	/* If we're paging this subscriber for LCS, stop paging. */
-	paging_request_cancel(lcs_loc_req->conn->bsub, BSC_PAGING_FOR_LCS);
+	if (lcs_loc_req->conn->bsub)
+		paging_request_cancel(lcs_loc_req->conn->bsub, BSC_PAGING_FOR_LCS);
 
 	/* Send Perform Location Abort to SMLC, only if we got started on the Lb */
 	if (lcs_loc_req->conn->lcs.lb.state == SUBSCR_SCCP_ST_CONNECTED)
diff --git a/src/osmo-bsc/paging.c b/src/osmo-bsc/paging.c
index e1290f5cb..b73578e37 100644
--- a/src/osmo-bsc/paging.c
+++ b/src/osmo-bsc/paging.c
@@ -578,6 +578,7 @@ void paging_request_stop(struct bsc_msc_data **msc_p, enum bsc_paging_reason *re
 void paging_request_cancel(struct bsc_subscr *bsub, enum bsc_paging_reason reasons)
 {
 	struct gsm_bts *bts;
+	OSMO_ASSERT(bsub);
 
 	llist_for_each_entry(bts, &bsc_gsmnet->bts_list, list) {
 		struct gsm_paging_request *req, *req2;