Watermark Stealing in Large Language Models