Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving