[Google Pixel 2 XL ROMs, Kernels, Recoveries, & Oth] Freak07:
for simplicitys sake and now that twrp seems to be stable I will only provide a twrp zip.

The detailed changelog I will hide here:

d578709 Linux 4.4.112

97a6156 selftests/x86: Add test_vsyscall

7da194b x86/alternatives: Add missing '\n' at end of ALTERNATIVE inline asm

1853e99 x86/alternatives: Fix optimize_nops() checking

709087c sysfs/cpu: Fix typos in vulnerability documentation

ab0ca31 x86/cpu: Implement CPU vulnerabilites sysfs functions

007bb2a sysfs/cpu: Add vulnerability folder

6306c3c x86/cpu: Merge bugs.c and bugs_64.c

2e90557 x86/cpufeatures: Add X86_BUG_SPECTRE_V[12]

3afb82a x86/pti: Rename BUG_CPU_INSECURE to BUG_CPU_MELTDOWN

ce357d1 x86/cpufeatures: Add X86_BUG_CPU_INSECURE

6844738 x86/cpufeatures: Make CPU bugs sticky

2cfbd8c x86/cpu: Factor out application of forced CPU caps

a6e7399 x86/Documentation: Add PTI description

f458fa1 e1000e: Fix e1000_check_for_copper_link_ich8lan return value.

29b7fe5 uas: ignore UAS for Norelsys NS1068(X) chips

b184053 Bluetooth: Prevent stack info leak from the EFS element.

43f5383 usbip: remove kernel addresses from usb device and urb debug msgs

b8eb382 USB: fix usbmon BUG trigger

fc0aa5d usb: misc: usb3503: make sure reset is low for at least 100us

edcf406 USB: serial: cp210x: add new device ID ELV ALC 8xxx

299af06 USB: serial: cp210x: add IDs for LifeScan OneTouch Verio IQ

d8863a3 target: Avoid early CMD_T_PRE_EXECUTE failures during ABORT_TASK

e0719dc iscsi-target: Make TASK_REASSIGN use proper se_cmd->cmd_kref

6c26eda bpf, array: fix overflow in max_entries and undefined behavior in index_mask

8c4e071 bpf: prevent out-of-bounds speculation

f3f96b1 bpf: adjust insn_aux_data when patching insns

2d0c931 bpf: refactor fixup_bpf_calls()

5dda066 bpf: move fixup_bpf_calls() function

0b062d1 bpf: don't (ab)use instructions to store state

7cdfaa0 bpf: add bpf_patch_insn_single helper

527c98c kaiser: Set _PAGE_NX only if supported

271f79a drm/vmwgfx: Potential off by one in vmw_view_add()

0e726e1 KVM: x86: Add memory barrier on vmcs field lookup

13f5cd3a x86/microcode/intel: Extend BDW late-loading with a revision check

d86e53a rbd: set max_segments to USHRT_MAX

b4ccd78 crypto: algapi - fix NULL dereference in crypto_remove_spawns()

e221d91 ipv6: fix possible mem leaks in ipv6_make_skb()

68bec73 net: stmmac: enable EEE in MII, GMII or RGMII only

19e9147 sh_eth: fix SH7757 GEther initialization

1533eff sh_eth: fix TSU resource handling

b44804b RDS: null pointer dereference in rds_atomic_free_op

aed0cd4 RDS: Heap OOB write in rds_message_alloc_sgs()

7a3fffd net: core: fix module type in sock_diag_bind

d483a21 ip6_tunnel: disable dst caching if tunnel is dual-stack

6725697 8021q: fix a memory leak for VLAN 0 device

10cd1768 x86/pti/efi: broken conversion from efi to kernel page table

82ac5c3 Revert "userfaultfd: selftest: vm: allow to build in vm/ directory"

dd45316 xhci: Fix ring leak in failure path of xhci_alloc_virt_device()

4a03c32 hwrng: core - sleep interruptible in read

e750fc7 x86/mm/pat, /dev/mem: Remove superfluous error message

dd46ec7 cx82310_eth: use skb_cow_head() to deal with cloned skbs

3b8ff2c smsc75xx: use skb_cow_head() to deal with cloned skbs

a36e24b sr9700: use skb_cow_head() to deal with cloned skbs

b54c770 lan78xx: use skb_cow_head() to deal with cloned skbs

69741ad r8152: adjust ALDPS function

53f80df r8152: use test_and_clear_bit

b70dd30 r8152: fix the wake event

c8d521f usb: musb: ux500: Fix NULL pointer dereference at system PM

c4e10fb usbvision fix overflow of interfaces array

10f4733 locking/mutex: Allow next waiter lockless wakeup

dc2d888 futex: Replace barrier() in unqueue_me() with READ_ONCE()

b754dfa locks: don't check for race with close when setting OFD lock

e84373e zswap: don't param_set_charp while holding spinlock

e26b944 mm/zswap: use workqueue to destroy pool

f739187 mm/page-writeback: fix dirty_ratelimit calculation

49645c6 mm/compaction: pass only pageblock aligned range to pageblock_pfn_to_page

14644ad mm/compaction: fix invalid free_pfn and compact_cached_free_pfn

c88ff3c x86/acpi: Reduce code duplication in mp_override_legacy_irq()

2e3def4 ALSA: aloop: Fix racy hw constraints adjustment

257da9f ALSA: aloop: Fix inconsistent format due to incomplete rule

b286993 ALSA: aloop: Release cable upon open error path

9014ea7 ALSA: pcm: Allow aborting mutex lock at OSS read/write loops

9398407 ALSA: pcm: Abort properly at pending signal in OSS read/write loops

08dfb42 ALSA: pcm: Add missing error checks in OSS emulation plugin builder

366db58 ALSA: pcm: Remove incorrect snd_BUG_ON() usages

02f4232 iommu/arm-smmu-v3: Don't free page table ops twice

be2f8e9 x86/acpi: Handle SCI interrupts above legacy space gracefully

7980864 x86/vsdo: Fix build on PARAVIRT_CLOCK=y, KVM_GUEST=n

8c04e09 kvm: vmx: Scrub hardware GPRs at VM-exit

f132dc2 net/mac80211/debugfs.c: prevent build failure with CONFIG_UBSAN=y

cc87b47 MIPS: Disallow outsized PTRACE_SETREGSET NT_PRFPREG regset accesses

a3d6d70 MIPS: Also verify sizeof `elf_fpreg_t' with PTRACE_SETREGSET

109caca MIPS: Fix an FCSR access API regression with NT_PRFPREG and MSA

709f74b MIPS: Consistently handle buffer counter with PTRACE_SETREGSET

2463a9e MIPS: Guard against any partial write attempt with PTRACE_SETREGSET

c58dca0 MIPS: Factor out NT_PRFPREG regset access helpers

f3896ad MIPS: Validate PR_SET_FP_MODE prctl(2) requests against the ABI of the task

38c8d25 IB/srpt: Disable RDMA access by the initiator

396b653 can: gs_usb: fix return value of the "set_bittiming" callback

8b63513 KVM: Fix stack-out-of-bounds read in write_mmio

a04ef3d dm bufio: fix shrinker scans when (nr_to_scan < retain_target)

7cb20e0 include: sound: Fix timespec header issue

f0fc5c7 msm: ipa: Remove unwanted gsi debug register reads

f9777ee msm: adsprpc: Use unsigned integer for length values

3204001 msm: ADSPRPC: Use SMD on targets that doesn't support GLINK

276a783 arm64: SW PAN: Update saved ttbr0 value on enter_lazy_tlb

051a406 arm64: SW PAN: Point saved ttbr0 at the zero page when switching to init_mm

1ad777d msm: jpegdma: Fix for ASAN issues in jpegdma module

ac0afaf msm: camera: Prevent buffer overread in write_logsync.

073cc26 ion: Actually check start exists

5cd73e7 ion: ensure CMO target is valid

f862911 msm: Array bounds check for buffer index

617ffef ALSA: pcm: use lock to protect substream runtime resource

724b211 ALSA: pcm: add locks for accessing runtime resource

218eb33 qseecom: check return value of __qseecom_process_reentrancy

f835abe sched: WALT: use cumulative window demand for energy_diff

2e49c03 update:kirisakura_defconfig

e41c814 kernel/sched/walt.c: tune walt window size a bit

36829d2 qcacld-3.0: disable mac randomization by default

3d34ea3 cpuidle: don't disable cpuidle when entering suspend

91e5cdd zram: Use half NR_CPUS as max streams

1f46481 fpc1020: Increase nice value when screen is off

3eb7ff2 drivers: fingerprint: boost cpufreq on unlock

9542c13 mdss: Add state_notifier hooks

e33c5aa state_notifier: Remove internal enablement switch

dc48400 state_notifier: Drop unneeded module_param_named entries

0d9a3ee state_notifier: Make workqueues unbound

2e22f99 state_notifier: Reduce defer on suspend call to 1 second

9abc62d state_notifier: Queue work on any core

9a3bdd4 state_notifier: Enable by default

e0c35e2 wahoo: Add state notifier driver

5b1c5cd kernel/fs/mm/block/drivers/scripts/net: More tautological comparison fixes

86c53e3 linux: kdev: Another tautological comparison

4bbbef1 linux: range: MAX_RESOURCE is always bigger than a u64

f32983e mdss: Add backlight dimmer option

7c35349 fix little error for meltdown patches

736a7cf update:kirisakura_defconfig:make neccesary changes for Copperhead OS security patches

8390e6a replace incorrect strscpy use in FORTIFY_SOURCE

936925f BACKPORT: include/linux/string.h: add the option of fortified string.h functions

5a09642 add vmalloc alloc_size attributes

7429dae add kmalloc/krealloc alloc_size attributes

f3ca670 Revert "Revert "UPSTREAM: arm64, vdso: Define vdso_{start,end} as array""

1756a37 Revert "Revert "BACKPORT: arm64: apply __ro_after_init to some objects""

6879872 arm64: zero the leading stack canary byte

e859919 add toggle for disabling newly added USB devices

59407c2 restrict device timing side channels

d2d3a9c randomize lower bits of the argument block

11119b5 UPSTREAM: mark most percpu globals as __ro_after_init

e6cc6dc UPSTREAM: mm/mmap.c: mark protection_map as __ro_after_init

46543ae bug on !PageSlab && !PageCompound in ksize

83558b0 always perform cache_from_obj consistency checks

aee22cc bug on kmem_cache_free with the wrong cache

52aba67 real slab_equal_or_root check for !MEMCG_KMEM

ebf7c00 add missing cache_from_obj !PageSlab check

8a1986e add a SLAB_HARDENED configuration option

a1381c6c BACKPORT: mm: allow slab_nomerge to be set at build time

ef9af11 UPSTREAM: mm/slub.c: add a naive detection of double free or corruption

e01c8b1 UPSTREAM: mm: add SLUB free list pointer obfuscation

ff5e59c UPSTREAM: mm/slub: query dynamic DEBUG_PAGEALLOC setting

4cf00a0 UPSTREAM: mm/slub.c: fix random_seq offset destruction

7162ffa UPSTREAM: mm/slab.c: fix SLAB freelist randomization duplicate entries

d57bb4f gather extra early boot entropy

20350b2 BACKPORT: init/main.c: extract early boot entropy from the passed cmdline

19ac60b disable brk system call

9c51463 enable protected_{symlinks,hardlinks} by default

c44bb5e disable ptrace_scope by default

38f44bc add specialized MAC randomization for qcacld-3.0

f4d0dc7 wcnss: fix 3 byte buffer overflow on MAC change

9fe68a2 Revert "BACKPORT: arm64: apply __ro_after_init to some objects"

ff8a067 Revert "UPSTREAM: arm64, vdso: Define vdso_{start,end} as array"

b210851 Revert "BACKPORT: include/linux/string.h: add the option of fortified string.h functions"

2e29e44 Revert "UPSTREAM: replace incorrect strscpy use in FORTIFY_SOURCE"

22ea954 update:defconfig

8f05566 Revert "arm64: zero the leading stack canary byte"

6d0b082 Revert "arm64: properly account for stack rnd in mmap base"

19a5971 Revert "mark protection_map as __ro_after_init"

c10f5f9 Revert "mark most percpu globals as __ro_after_init"

3f754c0 Revert "randomize lower bits of the argument block"

812e43d Revert "enable protected_{symlinks,hardlinks} by default"

bcf7f71 Revert "arm64: determine stack entropy based on mmap entropy"

d92206e Revert "add page sanitization / verification"

81983a81 Revert "mm, page_alloc: Fix declaration after statement warning"

8e916a2 Revert "add kmalloc alloc_size attributes"

2ae0aae Revert "add vmalloc alloc_size attributes"

43ca139 xRevert "wcnss: fix 3 byte buffer overflow on MAC change"

40f7f5b Revert "Revert "smb-lib: Make forced fast charge current tuneable""

69e182f Revert "Revert "power: smb-lib: Force enable USB fast charge""

531b4da md: disable dm-verity

04e521f arm64: muskie/walleye: Disable AVB

ad98f24 Linux 4.4.111

568553e Fix build error in vma.c

c39b333 Map the vsyscall page with _PAGE_USER

584575b module: Issue warnings when tainting kernel

1ba5c42 module: keep percpu symbols in module's symtab

9f37a8d genksyms: Handle string literals with spaces in reference files

2a9cb0f x86/tlb: Drop the _GPL from the cpu_tlbstate export

3a712f9 parisc: Fix alignment of pa_tlb_lock in assembly on 32-bit SMP kernel

24c5862 x86/microcode/AMD: Add support for fam17h microcode loading

2e6a780 Input: elantech - add new icbody type 15

ca9d2b3 ARC: uaccess: dont use "l" gcc inline asm constraint modifier

53e668b kernel/signal.c: remove the no longer needed SIGNAL_UNKILLABLE check in complete_signal()

f0006d5 kernel/signal.c: protect the SIGNAL_UNKILLABLE tasks from !sig_kernel_only() signals

832a2fe kernel/signal.c: protect the traced SIGNAL_UNKILLABLE tasks from SIGKILL

3ef688a kernel: make groups_sort calling a responsibility group_info allocators

f828b40 fscache: Fix the default for fscache_maybe_release_page()

b53c02c sunxi-rsb: Include OF based modalias in device uevent

14c14dc crypto: pcrypt - fix freeing pcrypt instances

f6833b9 crypto: chacha20poly1305 - validate the digest size

cd137d1 crypto: n2 - cure use after free

cdaa26b kernel/acct.c: fix the acct->needcheck check in check_free_space()

573158f x86/kasan: Write protect kasan zero shadow

a50f3c6 Revert "qcom: msm-core: Revert a couple of patches."

9012d7e Revert "thermal-core: Fix invalid sensor data being accepted"

5556c90 Revert "msm-core: Fix error handling of sensor data retrieval"

8a54794 Revert "msm-core: Rework resampling processing"

e969c8a Revert "msm-core: Improve sampling conditioning"

46c9236 Revert "msm-core: Add back periodic polling and fix various race conditions"

cda0057 clocksource: arch_timer: make virtual counter access configurable

9504d4d ANDROID: sdcardfs: Fix missing break on default_normal

f8fb508 kgsl: Shut up about not being able to create debugfs

f43c9e0 arm64: Kconfig: Reword UNMAP_KERNEL_AT_EL0 kconfig entry

fbb6aec arm64: use RET instruction for exiting the trampoline

431115f FROMLIST: arm64: kaslr: Put kernel vectors address in separate data page

8d9aaa8 FROMLIST: arm64: mm: Introduce TTBR_ASID_MASK for getting at the ASID in the TTBR

bd632fc FROMLIST: arm64: Kconfig: Add CONFIG_UNMAP_KERNEL_AT_EL0

dae63d3 FROMLIST: arm64: entry: Add fake CPU feature for unmapping the kernel at EL0

df0f23a FROMLIST: arm64: tls: Avoid unconditional zeroing of tpidrro_el0 for native tasks

12fb48f FROMLIST: arm64: erratum: Work around Falkor erratum #E1003 in trampoline code

159c051 FROMLIST: arm64: entry: Hook up entry trampoline to exception vectors

e1fa14f FROMLIST: arm64: entry: Explicitly pass exception level to kernel_ventry macro

b7258dd FROMLIST: arm64: mm: Map entry trampoline into trampoline and kernel page tables

83aba59 FROMLIST: arm64: entry: Add exception trampoline page for exceptions from EL0

09ee315 FROMLIST: arm64: mm: Invalidate both kernel and user ASIDs when performing TLBI

3a0db4c FROMLIST: arm64: mm: Add arm64_kernel_unmapped_at_el0 helper

feff40e FROMLIST: arm64: mm: Allocate ASIDs in pairs

0785cad FROMLIST: arm64: mm: Fix and re-enable ARM64_SW_TTBR0_PAN

fd26162 FROMLIST: arm64: mm: Move ASID from TTBR0 to TTBR1

427e3dd FROMLIST: arm64: mm: Temporarily disable ARM64_SW_TTBR0_PAN

cc9b451 FROMLIST: arm64: mm: Use non-global mappings for kernel space

8f48cda sched: fix task-priority when using SCHED_RESET_ON_FORK

cb457f8 kthread: Allow kthread_bind() to actually control kthread affinity

0e951221 cpu: block cpu 0, 1, 2 and 3 from being unplugged

a8c936b cpu: Don't allow CPUs in the power cluster to be unplugged

9a578fc sched: core: the 8998 is an octa-core so allow the cpu 0, 1, 2 and 3

69a4340 kthread: Force all non-percpu kthreads onto the power cluster

77b1fa6 Revert "power: smb-lib: Force enable USB fast charge"

a26bb3c Revert "smb-lib: Make forced fast charge current tuneable"

89c7651 Revert "Revert "ANDROID: HACK: arm64, LLVMLinux: use -mno-implicit-float""

3de8320 UPSTREAM: arm64: factor out entry stack manipulation

bfe915d UPSTREAM: arm64: tlbflush.h: add __tlbi() macro

55398b7 FROMGIT: sched/sysctl: Fix attributes of some extern declarations

3af90f4 Revert "ANDROID: HACK: arm64, LLVMLinux: use -mno-implicit-float"

657e06f Linux 4.4.110

a379906 kaiser: Set _PAGE_NX only if supported

fcae9d1 x86/kasan: Clear kasan_zero_page after TLB flush

d5610d9 x86/vdso: Get pvclock data from the vvar VMA instead of the fixmap

7e0b3a2 x86, vdso, pvclock: Simplify and speed up the vdso pvclock reader

d81bb7d KPTI: Report when enabled

c552ffad KPTI: Rename to PAGE_TABLE_ISOLATION

a4afb82 x86/kaiser: Move feature detection up

5c3b8a9 kaiser: disabled on Xen PV

cd3ce9f x86/kaiser: Reenable PARAVIRT

44b097c x86/paravirt: Dont patch flush_tlb_single

754ddc8 kaiser: kaiser_flush_tlb_on_return_to_user() check PCID

d542370 kaiser: asm/tlbflush.h handle noPGE at lower level

de3475d kaiser: drop is_atomic arg to kaiser_pagetable_walk()

ae050f7 kaiser: use ALTERNATIVE instead of x86_cr3_pcid_noflush

e87a99f x86/kaiser: Check boottime cmdline params

0ccf493 x86/kaiser: Rename and simplify X86_FEATURE_KAISER handling

1fbe3c9 kaiser: add "nokaiser" boot option, using ALTERNATIVE

5414abc kaiser: fix unlikely error in alloc_ldt_struct()

063acc2 kaiser: _pgd_alloc() without __GFP_REPEAT to avoid stalls

75cfdc1 kaiser: paranoid_entry pass cr3 need to paranoid_exit

e2166ff kaiser: x86_cr3_pcid_noflush and x86_cr3_pcid_user

6e54d36 kaiser: PCID 0 for kernel and 128 for user

de71b51 kaiser: load_new_mm_cr3() let SWITCH_USER_CR3 flush user

4cfe2a7 kaiser: enhanced by kernel and user PCIDs

4a89643 kaiser: vmstat show NR_KAISERTABLE as nr_overhead

af42c00 kaiser: delete KAISER_REAL_SWITCH option

42a7d5d kaiser: name that 0x1000 KAISER_SHADOW_PGD_OFFSET

aa4c41c kaiser: cleanups while trying for gold link

1bdbdf2 kaiser: kaiser_remove_mapping() move along the pgd

506475a kaiser: tidied up kaiser_add/remove_mapping slightly

4b57c73 kaiser: tidied up asm/kaiser.h somewhat

cc68475 kaiser: ENOMEM if kaiser_pagetable_walk() NULL

2a5a4c3 kaiser: fix perf crashes

6956f66 kaiser: fix regs to do_nmi() ifndef CONFIG_KAISER

fe2f621 kaiser: KAISER depends on SMP

352eb2e kaiser: fix build and FIXME in alloc_ldt_struct()

23d13dd kaiser: stack map PAGE_SIZE at THREAD_SIZE-PAGE_SIZE

f5d8141 kaiser: do not set _PAGE_NX on pgd_none

28afda7 kaiser: merged update

fee9a77 KAISER: Kernel Address Isolation

71dcf08 fix error in fork.c

32be546 x86/boot: Add early cmdline parsing for options with arguments

115c484 Revert "UPSTREAM: Clarify naming of thread info/stack allocators"

f7b019c msm-core: Add back periodic polling and fix various race conditions

7ad1c60 msm-core: Improve sampling conditioning

af7ae44 msm-core: Rework resampling processing

2bedf07 msm-core: Fix error handling of sensor data retrieval

519474b thermal-core: Fix invalid sensor data being accepted

c5083f9 qcom: msm-core: Revert a couple of patches.

0cc9001 tcp_westwood: use tcp_jiffies32 instead of tcp_time_stamp

f3c5f1c tcp: introduce tcp_jiffies32

bc2923c tcp_westwood: fix tcp_westwood_info() style mistakes

23d19e4 tcp: replace cnt & rtt with struct in pkts_acked()

867273d cfq-iosched: temporarily boost queue priority for idle classes

b669a49 Revert "More Overclock, underclock, undervolt and gpu step"

f4c50e2 update:kirisakura_defconfig

0329d18 Revert "random: convert get_random_int/long into get_random_u32/u64"

66bdf3d random: Remove unused function

c8fdeae ANDROID: sdcardfs: remove dead function open_flags_to_access_mode()

6b89313 ANDROID: sdcardfs: Add default_normal option

57f5d9a ANDROID: sdcardfs: notify lower file of opens

b96e657 crypto: arm64/crc32 - merge CRC32 and PMULL instruction based drivers

a8fb327 crypto: arm64/chacha20 - implement NEON version based on SSE3 code

465dba6 crypto: arm64/crc32 - accelerated support based on x86 SSE implementation

73dcbc9 crypto: arm64/crct10dif - port x86 SSE implementation to arm64

29e4883 random: prevent add_input from doing anything

5ef1a70 random: fully switch to Chacha20

883e660 crypto: prepare to replace non-blocking pool with a Chacha20-based CRNG

b92ae26 crypto: chacha20poly1305 - Skip encryption/decryption for 0-len

ab6cb0c binfmt_elf.c: use get_random_int() to fix entropy depleting

c999bda usb: dwc3-msm: Remove indefinite wakeup

8444242 random: always use /dev/urandom

498f997 random: convert get_random_int/long into get_random_u32/u64

a46ee63 random: use chacha20 for get_random_int/long

3b002a3 random: fix comment for unused random_min_urandom_seed

24b61e7 random: remove variable limit

29e9da1 random: remove stale urandom_init_wait

5a4f5e8 msm-tsens: Reschedule work instead of causing uninterruptible sleep

c5309f8 time: move frequently used functions to headers and declare them inline

fcd2d75 update:kiriskura_defconfig