This is an odd edge case but I think it's a bug in opendkim. If a message is submitted and already has a DKIM signature from this host, that signature remains and new one is added. This is at best slightly confusing. I think the right behavior is to omit any DKIM signatures that are from the domain used for signing.
Environment: NetBSD 9 amd64, postfix, opendkim 2.10.3, emacs 28/gnus.
Reproduction recipe:
One can claim that gnus should remove the DKIM signature and probably some other headers. That is likely valid, but I think it is also true that opendkim should remove signatures with d= the same domain as it is configured to send.