tl;dr:1. Notice output depends only on 2 bits of the state, and after some shifts one of them is known2. Ask Z3 to solve the correspondence
https://github.com/p4-team/ctf/tree/master/2019-03-23-0ctf-quals/crypto_lfsr