It seems like $this->security->getUser() can also be of type null; however, parameter $user of App\Repository\UserLesso...getOneByUserAndLesson() does only seem to accept Symfony\Component\Security\Core\User\UserInterface, maybe add an additional type check?
(
Ignorable by Annotation
)
If this is a false-positive, you can also ignore this issue in your code via the ignore-type annotation