A confusion about other image transformations

[hhhzzj]

Hi, i have a confusion when running this paper’s experiments.
when i set the transformation to flip or rotation, the gradient of the adversarial examples is none.
What should i do? Thank you so much!