On the Off-Target Problem of Zero-Shot Multilingual Neural Machine Translation