did you get a chance to look at the WiFi channels allowed?
I am NOT entirely sure but quick google suggests in bcmwifi_channels.c in the kernel might be invovled.
Update - I can't see this in your sources.
But I see elsewhere you mention changing cnss-daemon. Could that be involved?
You can try it by your self, and let me know the result. Mine is ok with this configuration, so I don't have any intention to investigate or change it.