When a VM clock is days off but timedatectl still reports "synchronized," toggling NTP off and on or restarting systemd-timesyncd forces an immediate resync; here is why guest clocks drift and how to prevent it.