Notice that the 'route' is now the last, and the internet6 udp socket on the routable address is earlier in the list. Sure, because ntpd adds apparently sockets for addresses that exist on start, and then opens a routing socket to listen for addresses, and then adds sockets dynamically. This looks like a machine with one interface, tlp0. The first fstat shows the link-local addr from boot. It looks like two notifies on the routing socket. Try 'route -n monitor' to a file while getting both an automatic and a manual address and see what happens.
Description: PGP signature