so I decided, after reading this forum post, to rebuild the kernel. copied /boot/config-4.16.0-2-amd64 to /usr/src/linux-source-4.16/, set CONFIG_PINCTRL_AMD=y, and CONFIG_SYSTEM_TRUSTED_KEYS="", and ran make deb-pkg LOCALVERSION=-ideapad320. hours later, it's still running.
last updated 2018-08-18 21:43:10. served from tektonic.jcomeau.com