Poisoning Attack on Deep Generative Models in Autonomous Driving