Fix bug in `expr_clone`