Breaking cross-domain model protection via surrogate-guided unsupervised distribution transformation | Synapse