Simplify atw_start, atw_newstate. Synchronize access to atw_start by bracketing the call to ieee80211_next_scan in atw_next_scan with splnet()/splx().