Well, the error message would be in the Join Request, as TTN is not going to create a Join Accept if it reports that error. Did you click the Join Request to expand it, to see its details?
And did you try the workaround to temporarily change the AppKey, and if so: did that not solve your “N+1” problem?