Function timespecs_from_tracee 

fn timespecs_from_tracee(
    r: &Req<'_>,
    addr: u64,
) -> Result<Option<[u8; 32]>, i32>

Reads a struct timespec[2] from the tracee, widening 32-bit fields for i386 utimensat.

UTIME_NOW/UTIME_OMIT are positive values below 2^30 and survive the widening.