Stealthy Backdoor Attack to Real-world Models in Android Apps