Correction: it's *not* a hard lockup - the laptop still responds to ping. It may just be that the keyboard is not working after resume (or even that I mistyped something when trying to reboot it by typing blind).