Fingers crossed. Complete blank USB, drives precleared, one network interface and cache installed all as xfs. Seems decent now and with some mover events to clear cache. Running some Docker containers but no open vpn. Did one reboot so not a complete two days but seems better with less syslog messages. Or nothing that seems worrying. Will watch for couple days then mark as solved.