I’ve just tested on my side and I’m able to send/recv broadcast pkt (I used your script).
For quick testing, I applied the following config:
File /etc/hostapd.conf (for AP conf):
File /etc/dnsmasq.conf (for dhcp):
$ systemctl stop wpa_supplicant
$ /etc/init.d/dnsmasq restart
$ hostapd /etc/hostapd.conf
$ ifconfig wlan0 192.168.0.1
Wireshark/tcpdump shows pkts in/out on STA and AP side.
However this is on debian, I’m going to try on OE.
Any diff with your setup ?