This problem occurs when users share an Access Control List (ACL) with a Network Address Translation (NAT) policy. That is, the same ACL is used more than once in the Command Line Interface (CLI) NAT.
nat (inside) 1 access-list nat (dmz) 1 access-list
This issue is documented in Cisco bug ID CSCsd98278.
As a workaround, make copies of the ACL so it is no longer shared.
access-list < mypool1> ...access-list ...global (outside) 1 10.1.1.1nat (inside) 1 access-list nat (dmz) 1 access-list