never {
s0_init:
    if
    :: (p) && !(q) -> goto accept_s1
    :: !(p) && !(q) -> goto accept_s2
    fi;
accept_s1:
    if
    :: (p) && !(q) -> goto accept_s1
    :: !(p) && !(q) -> goto accept_s2
    fi;
accept_s2:
    if
    :: (p) && (q) -> goto accept_s2
    :: !(p) && (q) -> goto accept_s2
    :: (p) && !(q) -> goto accept_s2
    :: !(p) && !(q) -> goto accept_s2
    fi;
}