CCR2004 w/ IP conflicts reported from switch

I have a Dell N3048P switch that is in a constant state of conflict with the router getting an IP address. The leases shows conflict every moment and then disappears, then appears again with another IP.

The log shows: Detected conflict by ARP response from (IP) from (mac addr)

This error shows up approx every 30 minutes, and its doing this up the IP chain.

Its a new install, the switch is freshly flashed and reconfigured with dhcp. It does get an IP, because occasionally I can spot it, then log into the switch via browser, then after a while the IP no longer works, and this cycle continues.

Last thing, the switch is active and working, its the root switch off the router.

Has anyone seen this, or otherwise can I provide any more info about the problem? My searches online have not proven fruitful such as deleting the offending records from the ARP table, fresh reboots, etc.

Here is the config:

feb/13/2023 09:41:30 by RouterOS 7.7

software id = CPNV-JM5L

model = CCR2004-16G-2S+

serial number =

/interface bridge
add name=bridge1
/interface list
add name=WAN
add name=LAN
add
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool2 ranges=10.1.0.1-10.1.2.0,10.1.2.2-10.1.255.254
/ip dhcp-server
add address-pool=dhcp_pool2 interface=bridge1 lease-time=1h name=dhcp1
/port
set 0 name=serial0
set 1 name=serial1
/interface bridge port
add bridge=bridge1 interface=sfp-sfpplus1
add bridge=bridge1 interface=sfp-sfpplus2
add bridge=bridge1 interface=ether7
/interface list member
add interface=ether1 list=WAN
add interface=bridge1 list=LAN
/ip address
add address=10.1.2.1/16 interface=bridge1 network=10.1.0.0
/ip dhcp-client
add interface=ether1
/ip dhcp-server lease
add address=10.1.1.15 mac-address= server=dhcp1
/ip dhcp-server network
add address=10.1.0.0/16 dns-server=8.8.8.8 gateway=10.1.2.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip firewall address-list
add address=10.0.0.0-10.2.255.254 list=TRUSTED
/ip firewall filter
add action=accept chain=input comment=
"defconf: accept established,related,untracked" connection-state=
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=
invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=
"defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=accept chain=input comment="allow admin" in-interface-list=LAN
src-address-list=TRUSTED
add action=accept chain=input comment="users to Router services" dst-port=53
in-interface-list=LAN protocol=tcp
add action=accept chain=input comment="users to Router services" dst-port=53
in-interface-list=LAN protocol=udp
add action=drop chain=input comment="Drop all else"
add action=fasttrack-connection chain=forward comment="defconf: fasttrack"
connection-state=established,related hw-offload=yes
add action=accept chain=forward comment=
"defconf: accept established,related, untracked" connection-state=
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid"
connection-state=invalid
add action=accept chain=forward comment="allow internet" in-interface-list=
LAN out-interface-list=WAN
add action=drop chain=forward comment="Drop all else"
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/system clock
set time-zone-name=
/system identity
set name="MikroTik CCR2004-16G-2S"
/system routerboard settings
set enter-setup-on=delete-key

I could use some help, I wonder, am I being descriptive enough of the problem? Can I provide more detail?