Adversarial VQA: A New Benchmark for Evaluating the Robustness of VQA Models – Supplementary Material