Payslip errors and complex rules blamed for £3.5bn in overpayments