Repro:
db> show mount
0xfffff80007833330 /dev/vtbd0p2 on / (ufs)
...
$ kgdb
...
(gdb) p ((struct ufsmount*)((struct mount*)0xfffff80007833330).mnt_data).um_devvp
$5 = (struct vnode *) 0xfffff80007846ce8
...
$ sysctl 'debug.fail_point.ffs_backgroundwritedone_error=return(0x07846ce8)'
$ sync
(Before): Panic in bdirty -> reassignbuf
(After): No panic, log shows "ffs_backgroundwritedone: Erroring IO ..."