Covert Channel Attack to Federated Learning Systems