There was a bug prior to PR1.1 (I thought it had been fixed though), where deleted package files weren't properly cleared up until after a reboot. This could be related to that - the file has been deleted, so doesn't show up in ls, but is being held open, so continues to occupy space in the directory as reported by du.