bluetooth: avdtp: Check buf tailroom and len before using it

check buf->len before pulling data from buf, check buf tailroom before
adding data to buf.

Signed-off-by: Mark Wang <yichang.wang@nxp.com>