I’m researching Android Binder vulnerabilities and need to observe how the reference counter of struct binder_node changes at runtime.

Specifically, I want to verify whether the reference count is being incremented and decremented correctly during Binder operations.

What are the recommended ways to debug or trace this in the Android kernel? For example:

• Can this be done using kernel logs, tracing (ftrace / perf), or Binder debug features?

• Are there specific hooks or debug options in the Binder driver to monitor reference count changes?

Any guidance on tools, techniques, or relevant kernel code paths would be appreciated.