--- x/net/can/j1939/transport.c +++ y/net/can/j1939/transport.c @@ -1506,6 +1506,7 @@ static struct j1939_session *j1939_sessi skb_queue_head_init(&session->skb_queue); skb_queue_tail(&session->skb_queue, skb); + skb_get(skb); skcb = j1939_skb_to_cb(skb); memcpy(&session->skcb, skcb, sizeof(session->skcb));