target/openrisc: fix icount handling for timer instructions