So you want to change the value inside image to the perturbed value? Or you want to keep both?
Do you actually want to have the same .grad field as image? Or just make the perturbed image a leaf so that you can get gradients for it?