Is there anything obvious going on in /var/log/syslog? If the filesystem has gone read-only, the last thing in there might be some clue.

Also, the internal kernel log is still active even if it can’t write to syslog. Check that out using dmesg.

I usually see a filesystem become read-only if there is a corruption of some kind. I’m not sure what would cause that though.