I found outputting CounterNode::countInParent() in showTree() at CounterNode.cpp helps debugging.
Created attachment 35183 [details] Patch v1 --- 2 files changed, 15 insertions(+), 3 deletions(-)
Comment on attachment 35183 [details] Patch v1 http://trac.webkit.org/changeset/47583