There are two bugs: * the FashionMNIST loading does not have the right signature * the pgd attack sets default arguments wrong.