So I did some debugging by getting macOS kernel output to a serial port and file in VMware. The shutdown cause is 3, which is hard power down. It's the equivalent of holding the power key to hard shutdown laptop.