I'm filing a report with engineering on this particular issue so they can fix it; in the meantime, during your next maintenance window when you have an opportunity to reboot the switch, you can copy the startup configuration off the switch, rename or remove the offending ACLs, then copy the fixed configuration back onto the switch and reboot.