Multi-style conversion for semantic segmentation of lesions in fundus images by adversarial attacks