Finding Physical Adversarial Examples for Autonomous Driving with Fast and Differentiable Image Compositing