wifiwave2 CapsMan - SA Query timeout

Hi!
I constantly getting “SA Query timeout” with win11 22H2 with Intel(R) Wi-Fi 6 AX201 whcih results that it goes far to anather CAP.
I have CapsMan setup Hap ax3 is controler.
this from log:

 
 14:18:19 wireless,debug **:**:**:**:**:F9@wifi2 associated, signal strength -48
 14:18:19 wireless,info **:**:**:**:**:F9@wifi2 connected, signal strength -48
 14:20:34 wireless,info **:**:**:**:**:F9@wifi2 disconnected, SA Query timeout, signal strength -47
 14:20:34 wireless,debug **:**:**:**:**:F9@wifi2 disassociated, SA Query timeout, signal strength -47
 14:21:48 wireless,debug **:**:**:**:**:F9@5Ghz-Lampina-ac31 associated, signal strength -88
 14:21:49 wireless,info **:**:**:**:**:F9@5Ghz-Lampina-ac31 connected, signal strength -88

CapsMan relevant config

/interface wifiwave2 configuration
add channel.skip-dfs-channels=all country=Latvia datapath.bridge=bridge_LV disabled=no mode=ap name=Config-5Ghz security=sec1 ssid=*******
add country=Latvia datapath.bridge=bridge_LV disabled=no mode=ap name=Config-2Ghz security=sec1 security.authentication-types="" ssid=*******

/interface wifiwave2 security
add authentication-types=wpa2-psk disabled=no encryption="" ft=yes ft-over-ds=yes name=sec1

2023-10-19 14:41:45 by RouterOS 7.12rc1

model = C53UiG+5HPaxD2HPaxD

What i missing or what should i tune?

This workaround works for me:
http://forum.mikrotik.com/t/not-responding-f-k-a-sa-query-timeout/168864/1

Unfortunately support confirmed that it would make the clients vulnerable to the macstealer attack.