Did you run the command I recommend earlier about the journal?
Run your ncdu from root and see where the stuff is.