A confusion about other image transformations

[hhhzzj]

Hi, i have a confusion when running this paper’s experiments. when i set the transformation to flip or rotation, the gradient of the adversarial examples is none. What should i do? Thank you so much!