But maybe someone can point me in the right direction, how to proceed further.
So far my thinking goes this way:
It can't really be caused by a bug in my application code - and even if, the whole point of the watchdog is to reset the system in case of a bug in the code.
I also assume ATMEL produces a mcu with an actually functioning watchdog.