If you have a network diagram showing the VLANs, that would help.
The controller can act either as a layer 2 or layer 3 device. If it is acting as the layer 3 router for the SSID VLANs, the upstream network needs to know how to route those subnets back to the controller. Either a static route, or a dynamic routing procotol can be used for that. If the controller is acting as a layer 2 device and just passing the VLANs to an upstream switch for handling, then the infrastructure handles the routing.
In your case, if the controller is just doing layer 2, then you would want to look at the trunking configuration including the native VLAN setting. If the controller is doing layer 3, then it's most likely a routing issue since the controller's management subnet is reachable.