stack/conntrack: suppress the nested locking warning

reapEverything intentionally takes the second bucket lock.

PiperOrigin-RevId: 495967790

pkg/tcpip/stack/BUILD

@@ -112,6 +112,7 @@ declare_rwmutex(
 declare_rwmutex(
     name = "bucket_mutex",
     out = "bucket_mutex.go",
+    nested_lock_names = ["otherTuple"],
     package = "stack",
     prefix = "bucket",
 )

pkg/tcpip/stack/conntrack.go

@@ -1097,9 +1097,9 @@ func (ct *ConnTrack) reapTupleLocked(reapingTuple *tuple, bktID int, bkt *bucket
 		bkt.tuples.Remove(otherTuple)
 	} else {
 		otherTupleBkt := &ct.buckets[otherTupleBktID]
-		otherTupleBkt.mu.Lock()
+		otherTupleBkt.mu.NestedLock(bucketLockOthertuple)
 		otherTupleBkt.tuples.Remove(otherTuple)
-		otherTupleBkt.mu.Unlock()
+		otherTupleBkt.mu.NestedUnlock(bucketLockOthertuple)
 	}
 
 	return true