tbh execve should be userspace operation instead of syscall, idk why kernel needs to care about the executable format at all