Adversarial patch camouflage against aerial detection