Is azure patch management shutting down my machine?

Inizia con il log di sistema Ubuntu fornito, in particolare le voci di LinuxPatchExtension, l’heartbeat di WALinuxAgent e la richiesta di arresto di hv_utils, quindi confrontali con l’evento UserInitiated del log delle attività di Azure. Il lavoro è completato quando è stato stabilito se la gestione delle patch ha avviato l’arresto e sono state registrate le evidenze o la riproduzione necessarie per un fix.

Describe the bug
My VM was running for months up until a few days ago. Now something keeps shutting it down and the last thing in the log before the shutdown is always Azure Patch Management?

To Reproduce
Steps to reproduce the behavior:

1. create Ubuntu VM
2. start the machine
3. run something on the machine that pings an Azure table every 60 seconds
4. Make sure it stays running forever

Expected behavior
The machine needs to run 24x7

Screenshots
This is what I see in the log

Aug 24 16:48:46 sr-monitor bash[34022]: --------------------------------------------------------------------------------------------------------------------------------
Aug 24 16:48:46 sr-monitor bash[34022]: ,---.                        ,---.     |         |        ,-.-.                                        |
Aug 24 16:48:46 sr-monitor bash[34022]: |---|,---,.   .,---.,---.    |---',---.|--- ,---.|---.    | | |,---.,---.,---.,---.,---.,-.-.,---.,---.|---
Aug 24 16:48:46 sr-monitor bash[34022]: |   | .-' |   ||    |---'    |    ,---||    |    |   |    | | |,---||   |,---||   ||---'| | ||---'|   ||
Aug 24 16:48:46 sr-monitor bash[34022]: `   ''---'`---'`    `---'    `    `---^`---'`---'`   '    ` ' '`---^`   '`---^`---|`---'` ' '`---'`   '`---'
Aug 24 16:48:46 sr-monitor bash[34022]:                                                                               `---'
Aug 24 16:48:46 sr-monitor bash[34022]: --------------------------------------------------------------------------------------------------------------------------------
Aug 24 16:48:46 sr-monitor bash[34022]: Completed building bootstrap container configuration.
Aug 24 16:48:46 sr-monitor systemd[1]: MsftLinuxPatchAutoAssess.service: Deactivated successfully.
Aug 24 16:48:46 sr-monitor systemd[1]: Started MsftLinuxPatchAutoAssess.service - Microsoft Azure Linux Patch Extension - Auto Assessment.
Aug 24 16:48:46 sr-monitor systemd[1]: MsftLinuxPatchAutoAssess.service: Consumed 2.543s CPU time.
Aug 24 16:50:12 sr-monitor python3[832]: 2025-08-24T16:50:12.300489Z INFO TelemetryEventsCollector ExtHandler Collected 53 events for extension: Microsoft.CPlat.Core.LinuxPatchExtension
Aug 24 16:50:41 sr-monitor systemd[1]: Starting sysstat-collect.service - system activity accounting tool...
Aug 24 16:50:41 sr-monitor systemd[1]: sysstat-collect.service: Deactivated successfully.
Aug 24 16:50:41 sr-monitor systemd[1]: Finished sysstat-collect.service - system activity accounting tool.
Aug 24 16:53:43 sr-monitor systemd[1]: Starting fwupd-refresh.service - Refresh fwupd metadata and update motd...
Aug 24 16:53:43 sr-monitor fwupdmgr[34439]: Updating lvfs
Aug 24 16:53:43 sr-monitor fwupdmgr[34439]: Successfully downloaded new metadata: 0 local devices supported
Aug 24 16:53:43 sr-monitor systemd[1]: fwupd-refresh.service: Deactivated successfully.
Aug 24 16:53:43 sr-monitor systemd[1]: Finished fwupd-refresh.service - Refresh fwupd metadata and update motd.
Aug 24 16:53:50 sr-monitor PackageKit[34295]: daemon quit
Aug 24 16:53:50 sr-monitor systemd[1]: packagekit.service: Deactivated successfully.
Aug 24 16:55:01 sr-monitor CRON[34452]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
Aug 24 16:55:01 sr-monitor CRON[34453]: (root) CMD (command -v debian-sa1 > /dev/null && debian-sa1 1 1)
Aug 24 16:55:01 sr-monitor CRON[34452]: pam_unix(cron:session): session closed for user root
Aug 24 17:00:11 sr-monitor systemd[1]: Starting sysstat-collect.service - system activity accounting tool...
Aug 24 17:00:11 sr-monitor systemd[1]: sysstat-collect.service: Deactivated successfully.
Aug 24 17:00:11 sr-monitor systemd[1]: Finished sysstat-collect.service - system activity accounting tool.
Aug 24 17:02:17 sr-monitor python3[832]: 2025-08-24T17:02:17.439766Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.14.0.1 is running as the goal state agent [DEBUG HeartbeatCounter: 39;>
Aug 24 17:02:29 sr-monitor kernel: hv_utils: Shutdown request received - graceful shutdown initiated
Aug 24 17:02:29 sr-monitor systemd-logind[697]: The system will power off now!
Aug 24 17:02:29 sr-monitor systemd-logind[697]: System is powering down.

Desktop (please complete the following information):

• OS: ubuntu-24_04-lts
• Browser [e.g. chrome, safari]
• Version [e.g. 22]

Smartphone (please complete the following information):

• Device: [e.g. iPhone6]
• OS: [e.g. iOS8.1]
• Browser [e.g. stock browser, safari]
• Version [e.g. 22]

Additional context

The activity log shows a Health Updated Event by "system" (who is System?)

   "properties": {
        "title": "Stopping and deallocating",
        "details": "The Virtual Machine is in the process of being stopped and deallocated as requested by an authorized user or process. No other action is required at this time.",
        "currentHealthStatus": "Available",
        "previousHealthStatus": "Available",
        "type": "Downtime",
        "cause": "UserInitiated"
    },