// verifast_options{disable_overflow_check target:ILP32}


void reach_error(void) 
//@ requires false;
//@ ensures true;
{((void) sizeof ((0) ? 1 : 0), __extension__ ({ if (0) ; else __assert_fail ("0", "benchmark37_conjunctive.c", 2, __extension__ __PRETTY_FUNCTION__); }));}extern int __VERIFIER_nondet_int(void);
//@ requires true;
//@ ensures true;
extern bool __VERIFIER_nondet_bool(void);
//@ requires true;
//@ ensures true;
void __VERIFIER_assert(int cond) 
//@ requires (cond != 0);
//@ ensures (cond != 0);
{  if (!cond) {
    reach_error();
  }
}
int main() 
//@ requires module(benchmark37_conjunctive__verifast_instrumented, true);
//@ ensures junk();
{
    //@ open_module(); 
  int x = __VERIFIER_nondet_int();
  int y = __VERIFIER_nondet_int();
  if (!(x == y && x >= 0)) return 0;
while (x > 0)
//@ invariant ((0 <= y) && (x <= y));
    {
    x--;
    y--;
  }
  __VERIFIER_assert(y>=0);
  return 0;
}