If it’s the same amount every day (roughly), it’s probably trying to install an update over and over and failing.

Slight variations from other usual IoT spyware behaviour and update version sizes changing between minor versions.