LuaJIT's penalty is bound to the trace's starting point (loop back-edge or function entry), not to the specific bytecode position that caused the abort.