This *stinks* of an issue I had a while ago, needing an extra wait-state... the processor was near the edge of a voltage-defined boundary declared by the manufacturer.
https://box.agsys.io/hardfault.html
Unfortunately, it seems to be set correclty in this case.