shmat 0: addr=...