http://forum.mikrotik.com/t/v7-15-3-stable-is-released/176334/530
Try setting: security.management-protection=disabled
This disables 802.11w and you won’t see any SA query related entries anymore. Yeah, means you can’t use WPA3. But until Mikrotik makes the timeout value configurable (as quite all other vendors have it) there is no other solution as disabling 802.11w. Mikrotik’s default value seems to be too low. Or their retry-attempts value is too low as well. They have it hardcoded somewhere and we cant change it in case of timeouts.