invariant range
assertion fail