A Formal Disproof of Hirsch Conjecture