Controller falsification based on multiple models