User code calls kernel code all the time - just not by its address.