bug.h: introduce WARN_ONCE