Steps to reach springboard on iOS 9.x.x. Some iOS users reporting springboard crashes. While it changing press and hold Home+Power.
In theory you can flash custom firmware and unlock device using patched firmware. If you read instructions to modify firmware it looks like it should works.
As you already know Apple have been patched exploit that used by iCloud DNS Bypass. There was many devices with owner information on lock screen. This devices can be unlocked until reboot using Application -> Crash method. Since it no longer works, here is alternative ways to crash Activation page.
I have found glitch that allow to remove iOS Activation pages and skip them. It is not bypass, but way to find more bugs.
First of all need to understand that iCloud Lock it just device link to exact Apple ID. And once Apple ID owner remove his device from iCloud account, it immediately become unlocked. This makes you understand that the best and easiest way to remove iCloud Lock is contacting with owner, and ask him to remove device from his account.