Thanks for trying and confirming this. This is not something I’d thought of and seems to fix the issue nicely. I’ve been trying various ways to make level-triggered interrupts not double-trigger and come to the conclusion we need an API change. Exactly what that would look like is still up for discussion but will most likely involve some form of callback mechanism where the interrupt can be cleared in the IP before we reset the interrupt controller. Anything else is prone to race conditions where interrupts don’t trigger at all which is even worse than where we are now.
Peter