BadFunction.dfy(9,3): Error: failure to decrease termination measure Execution trace: (0,0): anon0 (0,0): anon3_Else Dafny program verifier finished with 2 verified, 1 error