if we miss 2 system ticks in a row the timer will
do full cycle before next interrupt. Change to up
mode (just like IAR does) to minimize impact of an
error.