MOK asked for enrollment of a your key even with SecureBoot disabled. I enrolled your key. After additionally enrolling a new TPM2 key for the luks swap partition, I am able to run in SecureBoot mode as with the original kernel, when the crashes occurred - if that is not the intended test mode, please notify me. I will report back in a couple of days, or as soon as I experience any buggy behaviour.