> It is not possible to write a valid C++ program, where the address of a reference is the nullptr.


Never heard of that. I guess that depends on your definition of valid, if writing bugs is not a “valid” C++ program, but there’s nothing stopping you from writing them.

And it has never stopped me from catching exactly this bug many times. I’ve even given you an example on how to do exactly this on my previous email.