This testcase from https://gitlab.com/apparmor/apparmor/-/issues/271 has a log line with FSUID and OUID, separated by 0x1d.