Towards Dataset Copyright Evasion Attack Against Personalized Diffusion Models