never {
s0_init:
    if
    :: (p) && (q) -> goto accept_s1
    :: (1) -> goto s0_init
    :: (p) && !(q) -> goto accept_s2
    fi;
accept_s1:
    if
    :: !(r) -> goto accept_s1
    fi;
accept_s2:
    if
    :: !(q) -> goto accept_s2
    :: (q) -> goto accept_s1
    fi;
}