EC: Embedded Systems Compartmentalization via Intra-Kernel Isolation