Speech recognition performance. "+LM" refers to shallow fusion decoding jointly with RNN-LM<cite> [13]</cite> , "+AT" refers to the adversarial training proposed here, "+Both" indicates training with AT and joint decoding with RNN-LM, and BT is the prior work of back-translation [21] .