Phase Transition from Clean Training to Adversarial Training