Try to look at -> Network > Controller >Control Plane Security
if Enabled look check "Number of AP Whitelist Entries" Maybe some of them are listed there as whitelist and thus blocked from movement.
In my case it helps:
first change Control plane security entry to proper ip-group than from AP installation > provision AP to different group.