Aborting transactions during shutdown is triggered by the shutdown task, running on a thread other than the one that owns RecoveryUnit objects. That could cause a read-after-write data race when the connection thread attempts to destroy its opCtx, while the shutdown task attempts to access the opCtx through the associated RecoveryUnit.