On Checking Model Checkers