Is there a tutorial available on how to bisect the kernel and install and test the bisected version?

To me it seems the problem only occurs in connection with NFS. I could not reproduce the problem when NFS is not used. However, after reading data from NFS mounts the problem reliably occurs within a few minutes.

Here's a log from a third machine:
[  359.319126] BUG: unable to handle page fault for address: ffff9d95f6147697
[  359.319132] #PF: supervisor read access in kernel mode
[  359.319134] #PF: error_code(0x0000) - not-present page
[  359.319136] PGD 378401067 P4D 378401067 PUD 0 
[  359.319141] Oops: 0000 [#1] SMP PTI
[  359.319146] CPU: 2 PID: 321 Comm: jbd2/sda6-8 Tainted: G           OE     5.4.0-40-generic #44-Ubuntu
[  359.319148] Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./B85M Pro4, BIOS P2.50 12/11/2015
[  359.319154] RIP: 0010:kmem_cache_alloc+0x7e/0x230
[  359.319158] Code: 99 01 00 00 4d 8b 07 65 49 8b 50 08 65 4c 03 05 40 9d 56 4a 4d 8b 20 4d 85 e4 0f 84 85 01 00 00 41 8b 47 20 49 8b 3f 4c 01 e0 <48> 8b 18 48 89 c1 49 33 9f 70 01 00 00 4c 89 e0 48 0f c9 48 31 cb
[  359.319161] RSP: 0018:ffffa8984060b7c8 EFLAGS: 00010282
[  359.319163] RAX: ffff9d95f6147697 RBX: 0000000000000000 RCX: 0000000000000001
[  359.319165] RDX: 0000000000000019 RSI: 0000000000092a20 RDI: 0000000000031f90
[  359.319167] RBP: ffffa8984060b7f8 R08: ffff9d954dab1f90 R09: ffff9d953f8132b8
[  359.319169] R10: ffff9d953f8276c8 R11: 0000000000000029 R12: ffff9d95f6147697
[  359.319171] R13: 0000000000092a20 R14: ffff9d954ada4380 R15: ffff9d954ada4380
[  359.319174] FS:  0000000000000000(0000) GS:ffff9d954da80000(0000) knlGS:0000000000000000
[  359.319176] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  359.319178] CR2: ffff9d95f6147697 CR3: 0000000377a0a002 CR4: 00000000001606e0
[  359.319180] Call Trace:
[  359.319187]  ? mempool_alloc_slab+0x17/0x20
[  359.319192]  mempool_alloc_slab+0x17/0x20
[  359.319196]  mempool_alloc+0x64/0x180
[  359.319201]  ? __enqueue_entity+0x96/0xa0
[  359.319206]  sg_pool_alloc+0x4f/0x60
[  359.319211]  __sg_alloc_table+0x10b/0x170
[  359.319214]  sg_alloc_table_chained+0x47/0xa0
[  359.319217]  ? mac_pton+0xb0/0xb0
[  359.319222]  scsi_init_io+0x52/0x180
[  359.319227]  sd_setup_read_write_cmnd+0x67/0x710
[  359.319231]  sd_init_command+0x11a/0x472
[  359.319235]  scsi_queue_rq+0x32e/0xa00
[  359.319239]  blk_mq_dispatch_rq_list+0x96/0x5a0
[  359.319243]  ? deadline_remove_request+0x4e/0xb0
[  359.319246]  ? dd_dispatch_request+0x1/0x1f0
[  359.319250]  blk_mq_do_dispatch_sched+0x67/0x100
[  359.319254]  blk_mq_sched_dispatch_requests+0x12d/0x180
[  359.319259]  __blk_mq_run_hw_queue+0x5a/0x110
[  359.319263]  __blk_mq_delay_run_hw_queue+0x15b/0x160
[  359.319267]  blk_mq_run_hw_queue+0x92/0x120
[  359.319270]  blk_mq_sched_insert_requests+0x74/0x100
[  359.319273]  blk_mq_flush_plug_list+0x1e8/0x290
[  359.319277]  blk_flush_plug_list+0xe3/0x110
[  359.319280]  blk_finish_plug+0x26/0x34
[  359.319287]  jbd2_journal_commit_transaction+0xda5/0x17e8
[  359.319293]  kjournald2+0xb6/0x280
[  359.319297]  ? wait_woken+0x80/0x80
[  359.319301]  kthread+0x104/0x140
[  359.319304]  ? commit_timeout+0x20/0x20
[  359.319307]  ? kthread_park+0x90/0x90
[  359.319312]  ret_from_fork+0x35/0x40
[  359.319315] Modules linked in: rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd grace fscache rfcomm msr vboxnetadp(OE) vboxnetflt(OE) vboxdrv(OE) amdgpu amd_iommu_v2 gpu_sched aufs hid_logitech_hidpp cmac algif_hash joydev algif_skcipher af_alg overlay bnep input_leds hid_logitech_dj hid_generic btusb uas btrtl intel_rapl_msr btbcm btintel usbhid bluetooth hid usb_storage ecdh_generic ecc intel_rapl_common x86_pkg_temp_thermal nls_iso8859_1 intel_powerclamp mei_hdcp snd_hda_codec_realtek snd_hda_codec_generic ledtrig_audio snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg coretemp snd_hda_codec snd_hda_core kvm_intel snd_hwdep snd_pcm kvm snd_seq_midi radeon snd_seq_midi_event snd_rawmidi snd_seq crct10dif_pclmul ghash_clmulni_intel ttm snd_seq_device snd_timer aesni_intel drm_kms_helper crypto_simd snd cryptd i2c_algo_bit glue_helper fb_sys_fops syscopyarea mei_me intel_cstate sysfillrect mei sysimgblt intel_rapl_perf soundcore mac_hid nf_log_ipv6 ip6t_REJECT nf_reject_ipv6 xt_hl ip6t_rt
[  359.319364]  nf_log_ipv4 nf_log_common ipt_REJECT nf_reject_ipv4 xt_LOG xt_limit xt_addrtype xt_tcpudp sch_fq_codel xt_conntrack nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c parport_pc ip6table_filter ip6_tables ppdev iptable_filter bpfilter lp parport drm sunrpc ip_tables x_tables autofs4 crc32_pclmul e1000e ahci i2c_i801 lpc_ich libahci video
[  359.319386] CR2: ffff9d95f6147697
[  359.319389] ---[ end trace b059e600d0f4c10e ]---