reorder decode args so childno comes first

like all the other syscall entry functions.