Properly handle multiple nonnull attributes in CodeGen