If you have unexplained disk usage that isn't reflected in du output, you most likely have a process holding onto a filehandle for a file that has since been deleted.  You can use lsof to find the process/file by running:

lsof -nP | grep '(deleted)'