diff --git a/lib/ns/query.c b/lib/ns/query.c
index 492d716f50..165dedaa1a 100644
--- a/lib/ns/query.c
+++ b/lib/ns/query.c
@@ -8147,6 +8147,8 @@ query_addnxrrsetnsec(query_ctx_t *qctx) {
 	isc_buffer_t *dbuf, b;
 	dns_name_t *fname;
 
+	INSIST(qctx->fname != NULL);
+
 	if ((qctx->fname->attributes & DNS_NAMEATTR_WILDCARD) == 0) {
 		query_addrrset(client, &qctx->fname,
 			       &qctx->rdataset, &qctx->sigrdataset,