Package: appstream-generator,ftp.debian.org Severity: grave dists/unstable/non-free/dep11/Components-amd64.yml.xz doesn't match dists/unstable/non-free/dep11/Components-amd64.yml.gz, and the former also doesn't match the expected hash from InRelease for the uncompressed file. It appears appstream-generator or mekeel died in some way and fed bogus data to dak, which failed to detect it.
Cheers, Julien