fix concurrency bug in timer_sleep() (push up intr_disable() block)