s2e-arm: set flag symb, check for state forking