Thanks for the review. I tried moving this into verifier_arena.c, but this test needs to set the second BPF_PSEUDO_MAP_VALUE ldimm64 immediate to arena_size exactly. The __arena C forms I checked materialize the arena-end offset as a separate ALU add or memory access offset instead, so they do not exercise arena_map_direct_value_addr() with off == arena_size.
So v2 keeps the userspace raw-instruction test and expands the commit message to explain why it is needed. v2: https://lore.kernel.org/all/[email protected]/

