CtrlRAG: Black-box Document Poisoning Attacks on Retrieval-Augmented Generation of Large Language ModelsÂ