". . .the current setup has been working for a long time with this load and the problems started recently."
Possibly a change in what's been routine traffic, and/or downstream MTU considerations?
I notice you're using tunnels, and although you using "ip tcp adjust-mss 1376", that has no effect on UDP traffic, like video streams, which can create fragmentation CPU performance issues, which might be accounted as IP Input. (NB: I've seen such newly created streams really chew up a small ISR's CPU.)
Further, although you're using "ip tcp adjust-mss 1376", there's more, I believe (NB: I haven't carefully studied your config) to optimize tunnels that impact MTU (NB: often, though, all the techniques don't have much control over typical UDP stream fragmentation).