CVE-2026-98778: binder: fix is_failure flag for superseded transaction cleanup

In the Linux kernel, the following vulnerability has been resolved:

binder: fix isfailure flag for superseded transaction cleanup

When a TFUPDATETXN transaction supersedes a pending async transaction, binderreleaseentirebuffer() is called with isfailure=false. Since the superseded transaction was never delivered, binderapplyfdfixups() was never called and no fds were installed in the target process.

With isfailure=false, the BINDERTYPEFDA cleanup handler interprets stale buffer contents as installed fd numbers and passes them to binderdeferredfdclose(), closing unrelated file descriptors.

Pass isfailure=true since the transaction was never delivered to the target, matching the semantics of all other undelivered-transaction cleanup paths.