We are now relying on the resumeToken to clone data, if the donor restarts in the middle and lastStableRecoveryTimestamp is smaller than the snapshot time we are reading, the donor will reconstruct the collection by reapplying oplogs, which will lead to a different physical layout and the resumeToken will point to something non-exist or wrong.