Issue 11322 - ICE with -inline cgcs.c 221

https://d.puremagic.com/issues/show_bug.cgi?id=11322

Use `Expression::toLvalue` to handle lvalue `CondExp` properly.