Challenges of Applying Formal Methods to Automotive Control Systems