Efficient Formal Verification for the Linux Kernel