I'd also note that nscd is monitoring /etc/resolv.conf via inotify and it has noticed any change only at 08:24:39 (the previous change of resolv.conf noticed by nscd is at 08:24:32 when NM took interfaces down and began to reestablish connections). So likely the direct write to resolv.conf by NM and then via netconfig had to come in a very close succession (not very surprising but still a data point).