RouterOS bridge mysteries explained

You can match IP traffic with mac-protocol=ip on a VLAN-aware bridge but you can’t select a specific VLAN as well. When VLAN-aware bridges were introduced Mikrotik should have separated the filter functionality so you can apply both a VLAN and another filter, rather than the limited either/or situation that exists.

Certainly on 6.48.7 the following works as expected:
/interface bridge
add admin-mac=D6:CA:6D:xx:xx:xx auto-mac=no ingress-filtering=yes name=bridge priority=0x4000 vlan-filtering=yes

/interface bridge filter
add action=log chain=forward mac-protocol=ip src-address=192.168.44.0/24