libbinder: service driver fuzzes nested ifaces

We:
- make a binder call
- get all of the FDs and binder objects from this call
- also fuzz these additional binder objects
  and use them and the FDs to construct parcels

Bug: 224646709
Fixes: 225083088
Test: android.hardware.vibrator-service.example_fuzzer
Test: binder_parcel_fuzzer
Change-Id: I3a1594c5777d7dfd4776b751d6f9054428655302