Generating Semantic Adversarial Examples with Differentiable Rendering