Got it:
rm /var/lib/dpkg/*old
should be executed last, or new -old files get created.