‎ zfs-auto-snapshots being cron'ed from two different places?

So this is what we have in our (root) cron:

#15,30,45 * * * * chronic zfs-auto-snapshot -r --keep=4 --label=frequent zroot
#0       * * * * chronic zfs-auto-snapshot -r --keep=24 --label=hourly zroot
#7       0 * * * chronic zfs-auto-snapshot -r --keep=7  --label=daily zroot
#14      0 * * 7 chronic zfs-auto-snapshot -r --keep=4  --label=weekly zroot
#28      0 1 * * chronic zfs-auto-snapshot -r --keep=12 --label=monthly zroot

But we’re also seeing snapshots at odd times. For instance hourlies show up right on the dot, as per our cron. But then something is making hourlies at 17 after the hour as well. Since, for hourlies, keep is set to 24, it ends up ditching the first half of each day’s hourlies because there ends up being 48 made in a day.

Is there some other separate mystery cron where this is happening? Or does zfs-auto-snapshot have its own config that I never knew about?

Not sure what os you’re running.
Is there a systemd timer as well?

Ubuntu. How would I see if there was a systemd timer?

Try just systemctl list-timers

I suggest dpkg -L zfs-auto-snapshot, ls /var/spool/cron /etc/cron*, and grep CRON /var/log/syslog.