Bluetooth - Authorization failure with Logitech speaker + debug info

Question

Logitech bt speaker refuses to connect for pairing. 100% reproducible.

Here's the log:

bluetoothd[2441]: src/device.c:device_create() Creating device 

/org/bluez/2441/hci0/dev_10_B7_F6_00_46_40
bluetoothd[2441]: src/device.c:btd_device_ref() 0xb7041bf8: ref=1
bluetoothd[2441]: src/device.c:device_set_temporary() temporary 1
bluetoothd[2441]: src/device.c:bonding_request_new() Requesting bonding for 

10:B7:F6:00:46:40
bluetoothd[2441]: src/device.c:bonding_request_new() Temporary agent registered 

for 10:B7:F6:00:46:40 at :1.20:/test/agent
bluetoothd[2441]: plugins/hciops.c:conn_complete() status 0x00
bluetoothd[2441]: src/adapter.c:adapter_get_device() 10:B7:F6:00:46:40
bluetoothd[2441]: plugins/hciops.c:remote_features_information() hci0 status 0
bluetoothd[2441]: plugins/hciops.c:remote_name_information() hci0 status 0
bluetoothd[2441]: plugins/hciops.c:link_key_request() hci0 dba 10:B7:F6:00:46:40
bluetoothd[2441]: plugins/hciops.c:get_auth_info() hci0 dba 10:B7:F6:00:46:40
bluetoothd[2441]: plugins/hciops.c:link_key_request() kernel auth requirements = 

0x03
bluetoothd[2441]: plugins/hciops.c:link_key_request() Matching key not found
bluetoothd[2441]: plugins/hciops.c:io_capa_request() hci0 IO capability request 

for 10:B7:F6:00:46:40
bluetoothd[2441]: plugins/hciops.c:get_auth_info() hci0 dba 10:B7:F6:00:46:40
bluetoothd[2441]: plugins/hciops.c:get_io_cap() initial authentication 

requirement is 0x03
bluetoothd[2441]: plugins/hciops.c:get_io_cap() final authentication requirement 

is 0x03
bluetoothd[2441]: plugins/hciops.c:simple_pairing_complete() hci0 status 30
bluetoothd[2441]: src/event.c:btd_event_simple_pairing_complete() status=1e
bluetoothd[2441]: plugins/hciops.c:auth_complete() hci0 status 5
bluetoothd[2441]: plugins/hciops.c:bonding_complete() status 0x05
bluetoothd[2441]: src/device.c:device_bonding_complete() bonding 0xb70392b0 

status 0x05
bluetoothd[2441]: src/device.c:device_cancel_bonding() Canceling bonding request 

for 10:B7:F6:00:46:40
bluetoothd[2441]: plugins/hciops.c:hciops_cancel_bonding() hci0

---

Here's the HCIDUMP

HCI sniffer - Bluetooth packet analyzer ver 2.4
device: hci0 snap_len: 1028 filter: 0xffffffff
< HCI Command: Create Connection (0x01|0x0005) plen 13
    bdaddr 10:B7:F6:00:46:40 ptype 0xcc18 rswitch 0x01 clkoffset 0x0000
    Packet type: DM1 DM3 DM5 DH1 DH3 DH5
> HCI Event: Command Status (0x0f) plen 4
    Create Connection (0x01|0x0005) status 0x00 ncmd 1
> HCI Event: Connect Complete (0x03) plen 11
    status 0x00 handle 11 bdaddr 10:B7:F6:00:46:40 type ACL encrypt 0x00
< HCI Command: Read Remote Supported Features (0x01|0x001b) plen 2
    handle 11
> HCI Event: Command Status (0x0f) plen 4
    Read Remote Supported Features (0x01|0x001b) status 0x00 ncmd 1
> HCI Event: Read Remote Supported Features (0x0b) plen 11
    status 0x00 handle 11
    Features: 0xff 0xff 0x8f 0xfe 0x9b 0xff 0x59 0x83
< HCI Command: Read Remote Extended Features (0x01|0x001c) plen 3
    handle 11 page 1
> HCI Event: Command Status (0x0f) plen 4
    Read Remote Extended Features (0x01|0x001c) status 0x00 ncmd 1
> HCI Event: Page Scan Repetition Mode Change (0x20) plen 7
    bdaddr 10:B7:F6:00:46:40 mode 1
> HCI Event: Max Slots Change (0x1b) plen 3
    handle 11 slots 5
> HCI Event: Read Remote Extended Features (0x23) plen 13
    status 0x00 handle 11 page 1 max 1
    Features: 0x01 0x00 0x00 0x00 0x00 0x00 0x00 0x00
< HCI Command: Remote Name Request (0x01|0x0019) plen 10
    bdaddr 10:B7:F6:00:46:40 mode 2 clkoffset 0x0000
> HCI Event: Command Status (0x0f) plen 4
    Remote Name Request (0x01|0x0019) status 0x00 ncmd 1
> HCI Event: Remote Name Req Complete (0x07) plen 255
    status 0x00 bdaddr 10:B7:F6:00:46:40 name 'Mini Boombox'
< HCI Command: Authentication Requested (0x01|0x0011) plen 2
    handle 11
> HCI Event: Command Status (0x0f) plen 4
    Authentication Requested (0x01|0x0011) status 0x00 ncmd 1
> HCI Event: Link Key Request (0x17) plen 6
    bdaddr 10:B7:F6:00:46:40
< HCI Command: Link Key Request Negative Reply (0x01|0x000c) plen 6
    bdaddr 10:B7:F6:00:46:40
> HCI Event: Command Complete (0x0e) plen 10
    Link Key Request Negative Reply (0x01|0x000c) ncmd 1
    status 0x00 bdaddr 10:B7:F6:00:46:40
> HCI Event: IO Capability Request (0x31) plen 6
    bdaddr 10:B7:F6:00:46:40
< HCI Command: IO Capability Request Reply (0x01|0x002b) plen 9
    bdaddr 10:B7:F6:00:46:40 capability 0x04 oob 0x00 auth 0x03
    Capability: Reserved (OOB data not present)
    Authentication: Dedicated Bonding (MITM Protection)
> HCI Event: Command Complete (0x0e) plen 10
    IO Capability Request Reply (0x01|0x002b) ncmd 1
    status 0x00 bdaddr 10:B7:F6:00:46:40
> HCI Event: Simple Pairing Complete (0x36) plen 7
    status 0x1e bdaddr 10:B7:F6:00:46:40
    Error: Invalid LMP Parameters
> HCI Event: Auth Complete (0x06) plen 3
    status 0x05 handle 11
    Error: Authentication Failure
< HCI Command: Disconnect (0x01|0x0006) plen 3
    handle 11 reason 0x13
    Reason: Remote User Terminated Connection
> HCI Event: Command Status (0x0f) plen 4
    Disconnect (0x01|0x0006) status 0x00 ncmd 1
> HCI Event: Disconn Complete (0x05) plen 4
    status 0x00 handle 11 reason 0x16
    Reason: Connection Terminated by Local Host