Yesterday afternoon around 2p local time, a CIFS share of a FlexVol containing multiple qtree spontaneously began hiding the qtrees within the share (filer is running 8.0.2P3 7-Mode): At the root of the share, non-qtree directories are still visible; qtrees are no longer visible.  However, if a user enters the path to the qtree manually, they can access a hidden qtree and files beneath it.  

By "spontaneously," I mean that /etc/log/auditlog and our homegrown API-based tool confirm that there were no filer configuration changes made.

The FlexVol and qtrees are all ntfs mode.  The "hidden qtree" behavior has been seen on SMB connections from Windows 7, w2k3 and OS X (at least 10.8, probably other versions).  We also share this FlexVol to NFS clients, although usage is light.  NFS clients can see and access all qtrees as usual.

There were a couple of initial reports from OS X users that they could not connect to the share at all, although I could not confirm or replicate this myself.

Share permissions are basic:

Name         Mount Point                       Description
----         -----------                       -----------
General      /vol/general                      General public share
everyone / Change
BUILTIN\Administrators / Full Control
DAYJOB\Domain Admins / Full Control

If we use "Previous versions" on Windows to access the 12p snapshot yesterday, the qtrees are all visible.  Using "cacls" or the "Security" tab to view permissions on both hidden and visible directories shows nothing unexpected - and no changes in permissions relative to the 12p snapshot.

A "cifs terminate"/"cifs restart" requested by NetApp support did not resolve the issue; they continue to work on it, but assert that they have never seen anything like it before.  

I'd be grateful for any ideas anyone here might have.

Thanks,
Andy