DuFFin: A Dual-Level Fingerprinting Framework for LLMs IP Protection