Fix virt address in user handler