Thanks a lot! Your thinking makes sense and I assume that this is the problem. It is now running for a couple of hours without problems.
Instead of posting the interrupt from secure world, I still do a callback to non-secure world and in the non-secure world I post the interrupt.
Jan.