As per ACLIC spec:

If synchronous exceptions can occur during the context save/restore segments, handling can only be resumed if the double trap extension is supported.

However, it's not clear how double trap can help here. Even if we handle the second exception trap with double trap - where should we return?
We were in the middle of the HW stacking sequence.

Current spec (Version v0.17) completely missing the details how it should work.