Colin,
Could this also result from the same WPA2-PSK network being broadcast from other access points (legacy) that haven't been removed?
Alternatively, could it be two nearby IAP clusters - that don't know of eachother - are broadcasting the same SSID and since the keys aren't synced that roaming clients would cause this?
I am troubleshooting this issue currently, and I suspect other APs are remaining from a recent system upgrade. Suggestions are welcomed.
Many thanks in advance!