Thanks all, it's definitely something related to the key expiring (but I was on a paid starter key that auto-renewed, not the trial). The bottom section (trying to delete /mnt/user) then repeats in the logs until I rebooted the box. To be honest, it's scared me off unraid and I spent last night moving all my VMs onto a new ZFS setup. Jul 21 12:23:52 J1900 emhttpd: error: get_key_info, 741: Invalid argument (22): stat: /boot/config/Starter.key
Jul 21 12:23:53 J1900 emhttpd: Unregistered Trial - expired (EEXPIRED)
Jul 21 12:23:53 J1900 emhttpd: error: malloc_share_locations, 8649: Operation not supported (95): getxattr: /mnt/user/appdata
Jul 21 12:23:53 J1900 emhttpd: EEXPIRED: Stopping array
Jul 21 12:23:53 J1900 emhttpd: Starter key detected, GUID: ***** FILE: /boot/config/Starter.key
Jul 21 12:23:53 J1900 emhttpd: error: malloc_share_locations, 8649: Operation not supported (95): getxattr: /mnt/user/appdata
Jul 21 12:23:53 J1900 kernel: mdcmd (47): nocheck cancel
Jul 21 12:23:54 J1900 emhttpd: Spinning up all drives...
Jul 21 12:23:54 J1900 emhttpd: read SMART /dev/sdb
Jul 21 12:23:54 J1900 emhttpd: read SMART /dev/sdc
Jul 21 12:23:54 J1900 emhttpd: read SMART /dev/sda
Jul 21 12:23:54 J1900 emhttpd: Stopping services...
Jul 21 12:23:54 J1900 emhttpd: shcmd (126): /etc/rc.d/rc.samba stop
Jul 21 12:23:54 J1900 rc.samba: Stopping Samba server daemon...
Jul 21 12:23:54 J1900 rc.samba: kill 1856963
Jul 21 12:23:55 J1900 rc.samba: killall --ns 2053439 smbd nmbd wsdd2 winbindd
Jul 21 12:23:56 J1900 wsdd2[1856977]: 'Terminated' signal received.
Jul 21 12:23:56 J1900 wsdd2[1856977]: terminating.
Jul 21 12:23:56 J1900 winbindd[1856981]: [2026/07/21 12:23:56.004299, 0, traceid=1] ../../source3/winbindd/winbindd_dual.c:1984(winbindd_sig_term_handler)
Jul 21 12:23:56 J1900 winbindd[1856981]: Got sig[15] terminate (is_parent=1)
Jul 21 12:23:56 J1900 rc.samba: Samba server daemon... Stopped.
Jul 21 12:23:56 J1900 emhttpd: shcmd (127): rm -f /etc/avahi/services/smb.service
Jul 21 12:23:56 J1900 avahi-daemon[1856899]: Files changed, reloading.
Jul 21 12:23:56 J1900 avahi-daemon[1856899]: Service group file /services/smb.service vanished, removing services.
Jul 21 12:23:56 J1900 emhttpd: shcmd (129): /etc/rc.d/rc.nfsd stop
Jul 21 12:23:56 J1900 rc.nfsd: Stopping NFS server daemon...
Jul 21 12:23:56 J1900 rc.nfsd: /usr/sbin/rpc.nfsd 0
Jul 21 12:23:57 J1900 rpc.mountd[1856497]: Caught signal 15, un-registering and exiting.
Jul 21 12:23:57 J1900 rc.nfsd: /usr/sbin/exportfs -au
Jul 21 12:23:57 J1900 rc.nfsd: NFS server daemon... Stopped.
Jul 21 12:23:57 J1900 emhttpd: Stopping mover...
Jul 21 12:23:57 J1900 emhttpd: shcmd (130): /usr/local/sbin/mover stop
Jul 21 12:23:57 J1900 root: mover: not running
Jul 21 12:23:57 J1900 emhttpd: Sync filesystems...
Jul 21 12:23:57 J1900 emhttpd: shcmd (131): sync
Jul 21 12:23:57 J1900 emhttpd: shcmd (132): /usr/sbin/zfs unmount -a
Jul 21 12:23:57 J1900 emhttpd: shcmd (133): umount /mnt/user
Jul 21 12:23:57 J1900 root: umount: /mnt/user: not mounted.
Jul 21 12:23:57 J1900 emhttpd: shcmd (133): exit status: 32
Jul 21 12:23:57 J1900 emhttpd: shcmd (134): rmdir /mnt/user
Jul 21 12:23:57 J1900 root: rmdir: failed to remove '/mnt/user': Directory not empty
Jul 21 12:23:57 J1900 emhttpd: shcmd (134): exit status: 1
Jul 21 12:23:57 J1900 emhttpd: shcmd (136): rm -f /boot/config/plugins/dynamix/mover.cron
Jul 21 12:23:57 J1900 emhttpd: shcmd (137): /usr/local/sbin/update_cron
Jul 21 12:23:57 J1900 emhttpd: Retry unmounting user share(s)...
Jul 21 12:24:02 J1900 emhttpd: shcmd (138): umount /mnt/user
Jul 21 12:24:02 J1900 root: umount: /mnt/user: not mounted.