IAG: Input-aware Backdoor Attack on VLM-based Visual Grounding