[PATCH 6.16 245/627] wifi: nl80211: Set num_sub_specs before looping through sub_specs