This invariant was triggered while the 'planExecutorAlwaysFails' failpoint was enabled. I'm unsure if this particular helper is used in a way that could ever fail in practice, but the method returns a StatusWith, so it seems that an error from the PlanExecutor should be gracefully converted into a bad status instead of an invariant.