System: RHEL 9.5
rspamd Version: 3.11.0-1.el9, from the rspamd.com stable repo.

After a fresh installation, rpm -Va shows:

.....UG..    /var/log/rspamd

RPM expects user and group to be root, which can be confirmed by chowning and running rpm -Va again.

I believe that this is simply due to a missing attribute change in the last line of rspamd.spec:

%attr(-, _rspamd, _rspamd) %dir %{_localstatedir}/log/rspamd