EDIT: My initial response was incorrect. Use the numbered HTML escape (in this case ®) to get those characters into the sitemap.
Just put ® instead of what you have. The & is being escaped and then it just outputs the characters reg; because that isn't an HTML escape code.
                  Matt
                   2009-06-04 15:03:17