This fixes threads/alarm/alarm and ctrl/sampling2/sampling2, which were broken in 674911dd. The downcount can go negative for a few reasons, and was signed before.
674911dd