Is azure patch management shutting down my machine?

**Describe the bug**
My VM was running for months up until a few days ago. Now something keeps shutting it down and the last thing in the log before the shutdown is always Azure Patch Management?

**To Reproduce**
Steps to reproduce the behavior:
1. create Ubuntu VM
2. start the machine
3. run something on the machine that pings an Azure table every 60 seconds
4. Make sure it stays running forever

**Expected behavior**
The machine needs to run 24x7

**Screenshots**
This is what I see in the log
```
Aug 24 16:48:46 sr-monitor bash[34022]: --------------------------------------------------------------------------------------------------------------------------------
Aug 24 16:48:46 sr-monitor bash[34022]: ,---. ,---. | | ,-.-. |
Aug 24 16:48:46 sr-monitor bash[34022]: |---|,---,. .,---.,---. |---',---.|--- ,---.|---. | | |,---.,---.,---.,---.,---.,-.-.,---.,---.|---
Aug 24 16:48:46 sr-monitor bash[34022]: | | .-' | || |---' | ,---|| | | | | | |,---|| |,---|| ||---'| | ||---'| ||
Aug 24 16:48:46 sr-monitor bash[34022]: ` ''---'`---'` `---' ` `---^`---'`---'` ' ` ' '`---^` '`---^`---|`---'` ' '`---'` '`---'
Aug 24 16:48:46 sr-monitor bash[34022]: `---'
Aug 24 16:48:46 sr-monitor bash[34022]: --------------------------------------------------------------------------------------------------------------------------------
Aug 24 16:48:46 sr-monitor bash[34022]: Completed building bootstrap container configuration.
Aug 24 16:48:46 sr-monitor systemd[1]: MsftLinuxPatchAutoAssess.service: Deactivated successfully.
Aug 24 16:48:46 sr-monitor systemd[1]: Started MsftLinuxPatchAutoAssess.service - Microsoft Azure Linux Patch Extension - Auto Assessment.
Aug 24 16:48:46 sr-monitor systemd[1]: MsftLinuxPatchAutoAssess.service: Consumed 2.543s CPU time.
Aug 24 16:50:12 sr-monitor python3[832]: 2025-08-24T16:50:12.300489Z INFO TelemetryEventsCollector ExtHandler Collected 53 events for extension: Microsoft.CPlat.Core.LinuxPatchExtension
Aug 24 16:50:41 sr-monitor systemd[1]: Starting sysstat-collect.service - system activity accounting tool...
Aug 24 16:50:41 sr-monitor systemd[1]: sysstat-collect.service: Deactivated successfully.
Aug 24 16:50:41 sr-monitor systemd[1]: Finished sysstat-collect.service - system activity accounting tool.
Aug 24 16:53:43 sr-monitor systemd[1]: Starting fwupd-refresh.service - Refresh fwupd metadata and update motd...
Aug 24 16:53:43 sr-monitor fwupdmgr[34439]: Updating lvfs
Aug 24 16:53:43 sr-monitor fwupdmgr[34439]: Successfully downloaded new metadata: 0 local devices supported
Aug 24 16:53:43 sr-monitor systemd[1]: fwupd-refresh.service: Deactivated successfully.
Aug 24 16:53:43 sr-monitor systemd[1]: Finished fwupd-refresh.service - Refresh fwupd metadata and update motd.
Aug 24 16:53:50 sr-monitor PackageKit[34295]: daemon quit
Aug 24 16:53:50 sr-monitor systemd[1]: packagekit.service: Deactivated successfully.
Aug 24 16:55:01 sr-monitor CRON[34452]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
Aug 24 16:55:01 sr-monitor CRON[34453]: (root) CMD (command -v debian-sa1 > /dev/null && debian-sa1 1 1)
Aug 24 16:55:01 sr-monitor CRON[34452]: pam_unix(cron:session): session closed for user root
Aug 24 17:00:11 sr-monitor systemd[1]: Starting sysstat-collect.service - system activity accounting tool...
Aug 24 17:00:11 sr-monitor systemd[1]: sysstat-collect.service: Deactivated successfully.
Aug 24 17:00:11 sr-monitor systemd[1]: Finished sysstat-collect.service - system activity accounting tool.
Aug 24 17:02:17 sr-monitor python3[832]: 2025-08-24T17:02:17.439766Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.14.0.1 is running as the goal state agent [DEBUG HeartbeatCounter: 39;>
Aug 24 17:02:29 sr-monitor kernel: hv_utils: Shutdown request received - graceful shutdown initiated
Aug 24 17:02:29 sr-monitor systemd-logind[697]: The system will power off now!
Aug 24 17:02:29 sr-monitor systemd-logind[697]: System is powering down.
```

**Desktop (please complete the following information):**
- OS: ubuntu-24_04-lts
- Browser [e.g. chrome, safari]
- Version [e.g. 22]

**Smartphone (please complete the following information):**
- Device: [e.g. iPhone6]
- OS: [e.g. iOS8.1]
- Browser [e.g. stock browser, safari]
- Version [e.g. 22]

**Additional context**

The activity log shows a Health Updated Event by "system" (who is System?)

```json
"properties": {
"title": "Stopping and deallocating",
"details": "The Virtual Machine is in the process of being stopped and deallocated as requested by an authorized user or process. No other action is required at this time.",
"currentHealthStatus": "Available",
"previousHealthStatus": "Available",
"type": "Downtime",
"cause": "UserInitiated"
},
```

从提供的 Ubuntu 系统日志开始，重点查看 LinuxPatchExtension 条目、WALinuxAgent heartbeat 以及 hv_utils 的关机请求，然后将其与 Azure 活动日志中的 UserInitiated 事件进行比较。确认补丁管理是否发起了关机，并记录修复所需的证据或复现方法，即视为完成。

由索引模型根据 Issue 内容生成。