Omg... SRX330 cluster here on 15.1X49-D45
commenting out the vpn alone with commit didn't work, so I went shotgun approach...maybe a full config wipe would have worked but the devices are across the country.
deactivate security ike
deactivate security ipsec
commit full
rollback 1
commit full
Finally fixed this. Thank you for steering me in the right direction.