Adversarial example is incorrect

[chebum]

There is an adversarial sample in the "Watermark Removal" section (bottom-right sample of the 9). The watermark can be easily removed using real-world inpainting software.

Adversarial sample from the paper:

Image processed by theinpaint.com:

CRFILL also seems to provide results different than shown in the paper.

CRFILL result from the paper::

CRFILL result I got on my computer:

Is the adversarial sample in the paper incorrect?