propagate error instead of panicking on out of bounds in physical-expr/src/analysis.rs #10992