Multi-engine SMT-based automatic model checker for safety properties of Lustre programs