Is azure patch management shutting down my machine?

Start with the provided Ubuntu system log, especially the LinuxPatchExtension entries, the WALinuxAgent heartbeat, and the hv_utils shutdown request, then compare them with the Azure activity log's UserInitiated event. Done means establishing whether patch management initiated the shutdown and recording the evidence or reproduction needed for a fix.

Describe the bug
My VM was running for months up until a few days ago. Now something keeps shutting it down and the last thing in the log before the shutdown is always Azure Patch Management?

To Reproduce
Steps to reproduce the behavior:

1. create Ubuntu VM
2. start the machine
3. run something on the machine that pings an Azure table every 60 seconds
4. Make sure it stays running forever

Expected behavior
The machine needs to run 24x7

Screenshots
This is what I see in the log

Aug 24 16:48:46 sr-monitor bash[34022]: --------------------------------------------------------------------------------------------------------------------------------
Aug 24 16:48:46 sr-monitor bash[34022]: ,---.                        ,---.     |         |        ,-.-.                                        |
Aug 24 16:48:46 sr-monitor bash[34022]: |---|,---,.   .,---.,---.    |---',---.|--- ,---.|---.    | | |,---.,---.,---.,---.,---.,-.-.,---.,---.|---
Aug 24 16:48:46 sr-monitor bash[34022]: |   | .-' |   ||    |---'    |    ,---||    |    |   |    | | |,---||   |,---||   ||---'| | ||---'|   ||
Aug 24 16:48:46 sr-monitor bash[34022]: `   ''---'`---'`    `---'    `    `---^`---'`---'`   '    ` ' '`---^`   '`---^`---|`---'` ' '`---'`   '`---'
Aug 24 16:48:46 sr-monitor bash[34022]:                                                                               `---'
Aug 24 16:48:46 sr-monitor bash[34022]: --------------------------------------------------------------------------------------------------------------------------------
Aug 24 16:48:46 sr-monitor bash[34022]: Completed building bootstrap container configuration.
Aug 24 16:48:46 sr-monitor systemd[1]: MsftLinuxPatchAutoAssess.service: Deactivated successfully.
Aug 24 16:48:46 sr-monitor systemd[1]: Started MsftLinuxPatchAutoAssess.service - Microsoft Azure Linux Patch Extension - Auto Assessment.
Aug 24 16:48:46 sr-monitor systemd[1]: MsftLinuxPatchAutoAssess.service: Consumed 2.543s CPU time.
Aug 24 16:50:12 sr-monitor python3[832]: 2025-08-24T16:50:12.300489Z INFO TelemetryEventsCollector ExtHandler Collected 53 events for extension: Microsoft.CPlat.Core.LinuxPatchExtension
Aug 24 16:50:41 sr-monitor systemd[1]: Starting sysstat-collect.service - system activity accounting tool...
Aug 24 16:50:41 sr-monitor systemd[1]: sysstat-collect.service: Deactivated successfully.
Aug 24 16:50:41 sr-monitor systemd[1]: Finished sysstat-collect.service - system activity accounting tool.
Aug 24 16:53:43 sr-monitor systemd[1]: Starting fwupd-refresh.service - Refresh fwupd metadata and update motd...
Aug 24 16:53:43 sr-monitor fwupdmgr[34439]: Updating lvfs
Aug 24 16:53:43 sr-monitor fwupdmgr[34439]: Successfully downloaded new metadata: 0 local devices supported
Aug 24 16:53:43 sr-monitor systemd[1]: fwupd-refresh.service: Deactivated successfully.
Aug 24 16:53:43 sr-monitor systemd[1]: Finished fwupd-refresh.service - Refresh fwupd metadata and update motd.
Aug 24 16:53:50 sr-monitor PackageKit[34295]: daemon quit
Aug 24 16:53:50 sr-monitor systemd[1]: packagekit.service: Deactivated successfully.
Aug 24 16:55:01 sr-monitor CRON[34452]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
Aug 24 16:55:01 sr-monitor CRON[34453]: (root) CMD (command -v debian-sa1 > /dev/null && debian-sa1 1 1)
Aug 24 16:55:01 sr-monitor CRON[34452]: pam_unix(cron:session): session closed for user root
Aug 24 17:00:11 sr-monitor systemd[1]: Starting sysstat-collect.service - system activity accounting tool...
Aug 24 17:00:11 sr-monitor systemd[1]: sysstat-collect.service: Deactivated successfully.
Aug 24 17:00:11 sr-monitor systemd[1]: Finished sysstat-collect.service - system activity accounting tool.
Aug 24 17:02:17 sr-monitor python3[832]: 2025-08-24T17:02:17.439766Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.14.0.1 is running as the goal state agent [DEBUG HeartbeatCounter: 39;>
Aug 24 17:02:29 sr-monitor kernel: hv_utils: Shutdown request received - graceful shutdown initiated
Aug 24 17:02:29 sr-monitor systemd-logind[697]: The system will power off now!
Aug 24 17:02:29 sr-monitor systemd-logind[697]: System is powering down.

Desktop (please complete the following information):

• OS: ubuntu-24_04-lts
• Browser [e.g. chrome, safari]
• Version [e.g. 22]

Smartphone (please complete the following information):

• Device: [e.g. iPhone6]
• OS: [e.g. iOS8.1]
• Browser [e.g. stock browser, safari]
• Version [e.g. 22]

Additional context

The activity log shows a Health Updated Event by "system" (who is System?)

   "properties": {
        "title": "Stopping and deallocating",
        "details": "The Virtual Machine is in the process of being stopped and deallocated as requested by an authorized user or process. No other action is required at this time.",
        "currentHealthStatus": "Available",
        "previousHealthStatus": "Available",
        "type": "Downtime",
        "cause": "UserInitiated"
    },