Joint Attribute and Model Generalization Learning for Privacy-Preserving Action Recognition