The cap to be checked (rs1) was being overwritten with the unsealed jump target before the type was checked