Model Checking Java Programs With Explanation