Combining Testing and Formal Veriication for Validating Reactive Systems