err_ptr_deref: handle PTR_RET()