the failure start of executor should not restart the worker, otherwise there would be an cascading failure