can: Use WARN_ONCE() instead of BUG_ON() for sanity check in receive path