Hi, I am still having the same problems on my Lenovo laptop.
There was a recommendation in this bug #939170 to blacklist the tpm modules, and for me this works, meaning the laptop will restart and shutdown as normal. When I build the upstream kernel without the Debian patches the laptop works as normal. This suggests to me one or more of the Debian patches is causing the problem and conflickting with the tpm modules. I don't see any Debian patches that refer to the tpm modules but few of them refer to security and lockdown. Anyhow, I just wanted to provide an update to this bug, hope it helps someone. Thanks Marc