Adversarial Training Generalizes Data-dependent Spectral Norm Regularization