Short answer
HubSpot's KB: disable ad blockers while connecting. The ad account must be active; disabled accounts can't connect and get disconnected if disabled later. Leave auto tracking on to track contacts.
1. In HubSpot
The relevant screen in my demo portal.

2. Worth knowing
Check the account status in Meta first when it fails.
3. Related
Facebook ad tracking and disconnecting.