If df and du give different output of disk usage. Then, most probably it is due to "open file descriptors".
Run `lsof +L1` to get a listing of open files that have been unlinked or removed. Note the file size and kill or restart the respective service.
Reference: walkernews.net