I believe I'm experiencing something very similar on 8.10.183.0 with 4800 APs (3700s do not appear to be impacted). Did you ever find a root cause or resolution?
I'm doing some testing with a 9800 IOS-XE based WLC and observed the same behavior. In my particular case I was able to achieve my desired result by moving everything into the redirect ACL, however, I'd like to understand if this is expected behavi...