I see the following message in log:
%IOSXE-3-PLATFORM: R0/0: kernel: usb 1-1.4.1: device descriptor read/64, error -71
After that event stop working NAT-Rules and some tunnels.
The problem is resolved by reload.
I have: ISR4331/K9, isr4300-universalk9.03.13.02.S.154-3.S2-ext.SPA.bin, uc/security/ipbase.
Do you have any ideas?