USB: gadget: f_mtp: Fix using tx buffer pointer