The most obvious example where real isn't the sum of user and sys:

$ time sleep 3

real    0m3.002s
user    0m0.004s
sys     0m0.000s
[download]