process.err

2024-06-11 06:45:58.111213: I tensorflow/core/platform/cpu_feature_guard.cc:210] This TensorFlow binary is optimized to use available CPU instructions in performance-critical operations.
To enable the following instructions: AVX2 FMA, in other operations, rebuild TensorFlow with the appropriate compiler flags.
2024-06-11 06:46:07.997437: W tensorflow/compiler/tf2tensorrt/utils/py_utils.cc:38] TF-TRT Warning: Could not find TensorRT
[nltk_data] Downloading package stopwords to /home/tthiep/nltk_data...
[nltk_data]   Package stopwords is already up-to-date!
[nltk_data] Downloading package averaged_perceptron_tagger to
[nltk_data]     /home/tthiep/nltk_data...
[nltk_data]   Package averaged_perceptron_tagger is already up-to-
[nltk_data]       date!
[nltk_data] Downloading package universal_tagset to
[nltk_data]     /home/tthiep/nltk_data...
[nltk_data]   Package universal_tagset is already up-to-date!
textattack: Unknown if model of class <class 'transformers.models.bert.modeling_bert.BertForSequenceClassification'> compatible with goal function <class 'textattack.goal_functions.classification.untargeted_classification.UntargetedClassification'>.

Generating adversarial examples:   0%|          | 0/1000 [00:00<?, ?it/s]
Generating adversarial examples:   0%|          | 1/1000 [00:00<13:53,  1.20it/s]
Generating adversarial examples:   0%|          | 2/1000 [00:01<08:24,  1.98it/s]
Generating adversarial examples:   0%|          | 3/1000 [00:01<06:28,  2.57it/s]
Generating adversarial examples:   0%|          | 4/1000 [00:01<05:33,  2.99it/s]2024-06-11 06:50:37.719578: I external/local_xla/xla/stream_executor/cuda/cuda_executor.cc:998] successful NUMA node read from SysFS had negative value (-1), but there must be at least one NUMA node, so returning NUMA node zero. See more at https://github.com/torvalds/linux/blob/v6.0/Documentation/ABI/testing/sysfs-bus-pci#L344-L355
2024-06-11 06:50:37.727378: I external/local_xla/xla/stream_executor/cuda/cuda_executor.cc:998] successful NUMA node read from SysFS had negative value (-1), but there must be at least one NUMA node, so returning NUMA node zero. See more at https://github.com/torvalds/linux/blob/v6.0/Documentation/ABI/testing/sysfs-bus-pci#L344-L355
2024-06-11 06:50:37.727499: I external/local_xla/xla/stream_executor/cuda/cuda_executor.cc:998] successful NUMA node read from SysFS had negative value (-1), but there must be at least one NUMA node, so returning NUMA node zero. See more at https://github.com/torvalds/linux/blob/v6.0/Documentation/ABI/testing/sysfs-bus-pci#L344-L355
2024-06-11 06:50:37.727838: I external/local_xla/xla/stream_executor/cuda/cuda_executor.cc:998] successful NUMA node read from SysFS had negative value (-1), but there must be at least one NUMA node, so returning NUMA node zero. See more at https://github.com/torvalds/linux/blob/v6.0/Documentation/ABI/testing/sysfs-bus-pci#L344-L355
2024-06-11 06:50:37.727965: I external/local_xla/xla/stream_executor/cuda/cuda_executor.cc:998] successful NUMA node read from SysFS had negative value (-1), but there must be at least one NUMA node, so returning NUMA node zero. See more at https://github.com/torvalds/linux/blob/v6.0/Documentation/ABI/testing/sysfs-bus-pci#L344-L355
2024-06-11 06:50:37.728069: I external/local_xla/xla/stream_executor/cuda/cuda_executor.cc:998] successful NUMA node read from SysFS had negative value (-1), but there must be at least one NUMA node, so returning NUMA node zero. See more at https://github.com/torvalds/linux/blob/v6.0/Documentation/ABI/testing/sysfs-bus-pci#L344-L355
2024-06-11 06:50:37.817532: I external/local_xla/xla/stream_executor/cuda/cuda_executor.cc:998] successful NUMA node read from SysFS had negative value (-1), but there must be at least one NUMA node, so returning NUMA node zero. See more at https://github.com/torvalds/linux/blob/v6.0/Documentation/ABI/testing/sysfs-bus-pci#L344-L355
2024-06-11 06:50:37.817671: I external/local_xla/xla/stream_executor/cuda/cuda_executor.cc:998] successful NUMA node read from SysFS had negative value (-1), but there must be at least one NUMA node, so returning NUMA node zero. See more at https://github.com/torvalds/linux/blob/v6.0/Documentation/ABI/testing/sysfs-bus-pci#L344-L355
2024-06-11 06:50:37.817788: I external/local_xla/xla/stream_executor/cuda/cuda_executor.cc:998] successful NUMA node read from SysFS had negative value (-1), but there must be at least one NUMA node, so returning NUMA node zero. See more at https://github.com/torvalds/linux/blob/v6.0/Documentation/ABI/testing/sysfs-bus-pci#L344-L355
2024-06-11 06:50:37.819907: I tensorflow/core/common_runtime/gpu/gpu_device.cc:1928] Created device /job:localhost/replica:0/task:0/device:GPU:0 with 9803 MB memory:  -> device: 0, name: NVIDIA GeForce RTX 2080 Ti, pci bus id: 0000:02:00.0, compute capability: 7.5

Generating adversarial examples:   0%|          | 5/1000 [04:11<24:56:56, 90.27s/it]
Generating adversarial examples:   1%|          | 6/1000 [04:11<16:28:22, 59.66s/it]
Generating adversarial examples:   1%|          | 7/1000 [04:11<11:05:55, 40.24s/it]
Generating adversarial examples:   1%|          | 8/1000 [05:15<13:08:57, 47.72s/it]
Generating adversarial examples:   1%|          | 9/1000 [06:37<16:03:32, 58.34s/it]
Generating adversarial examples:   1%|          | 10/1000 [08:58<23:06:51, 84.05s/it]
Generating adversarial examples:   1%|          | 11/1000 [10:09<21:59:16, 80.04s/it]
Generating adversarial examples:   1%|          | 12/1000 [12:49<28:35:13, 104.16s/it]
Generating adversarial examples:   1%|▏         | 13/1000 [15:08<31:28:37, 114.81s/it]
Generating adversarial examples:   1%|▏         | 14/1000 [16:12<27:14:55, 99.49s/it] 
Generating adversarial examples:   2%|▏         | 15/1000 [16:12<19:02:10, 69.57s/it]
Generating adversarial examples:   2%|▏         | 16/1000 [18:26<24:19:38, 89.00s/it]
Generating adversarial examples:   2%|▏         | 17/1000 [18:27<17:00:54, 62.31s/it]
Generating adversarial examples:   2%|▏         | 18/1000 [20:26<21:39:13, 79.38s/it]
Generating adversarial examples:   2%|▏         | 19/1000 [21:38<21:04:49, 77.36s/it]
Generating adversarial examples:   2%|▏         | 20/1000 [21:39<14:45:22, 54.21s/it]
Generating adversarial examples:   2%|▏         | 21/1000 [22:47<15:54:55, 58.52s/it]
Generating adversarial examples:   2%|▏         | 22/1000 [24:20<18:42:36, 68.87s/it]
Generating adversarial examples:   2%|▏         | 23/1000 [24:21<13:06:08, 48.28s/it]
Generating adversarial examples:   2%|▏         | 24/1000 [24:21<9:10:53, 33.87s/it] 
Generating adversarial examples:   2%|▎         | 25/1000 [25:27<11:48:19, 43.59s/it]
Generating adversarial examples:   3%|▎         | 26/1000 [42:37<91:50:45, 339.47s/it]
Generating adversarial examples:   3%|▎         | 27/1000 [44:52<75:12:20, 278.25s/it]
Generating adversarial examples:   3%|▎         | 28/1000 [46:14<59:12:27, 219.29s/it]
Generating adversarial examples:   3%|▎         | 29/1000 [46:14<41:25:19, 153.57s/it]
Generating adversarial examples:   3%|▎         | 30/1000 [47:21<34:23:19, 127.63s/it]
Generating adversarial examples:   3%|▎         | 31/1000 [1:04:23<106:31:48, 395.78s/it]
Generating adversarial examples:   3%|▎         | 32/1000 [1:07:26<89:15:08, 331.93s/it] 
Generating adversarial examples:   3%|▎         | 33/1000 [1:11:01<79:47:45, 297.07s/it]
Generating adversarial examples:   3%|▎         | 34/1000 [1:13:22<67:04:51, 249.99s/it]
Generating adversarial examples:   4%|▎         | 35/1000 [1:14:48<53:49:55, 200.82s/it]
Generating adversarial examples:   4%|▎         | 36/1000 [1:16:11<44:20:11, 165.57s/it]
Generating adversarial examples:   4%|▎         | 37/1000 [1:17:13<36:00:56, 134.64s/it]
Generating adversarial examples:   4%|▍         | 38/1000 [1:18:23<30:46:15, 115.15s/it]
Generating adversarial examples:   4%|▍         | 39/1000 [1:18:23<21:32:13, 80.68s/it] 
Generating adversarial examples:   4%|▍         | 40/1000 [1:18:24<15:04:48, 56.55s/it]
Generating adversarial examples:   4%|▍         | 41/1000 [1:19:24<15:20:26, 57.59s/it]
Generating adversarial examples:   4%|▍         | 42/1000 [1:20:26<15:42:23, 59.02s/it]
Generating adversarial examples:   4%|▍         | 43/1000 [1:22:11<19:20:54, 72.78s/it]
Generating adversarial examples:   4%|▍         | 44/1000 [1:39:56<98:21:36, 370.39s/it]
Generating adversarial examples:   4%|▍         | 45/1000 [1:41:00<73:51:30, 278.42s/it]
Generating adversarial examples:   5%|▍         | 46/1000 [1:41:00<51:39:58, 194.97s/it]
Generating adversarial examples:   5%|▍         | 47/1000 [1:41:00<36:08:53, 136.55s/it]
Generating adversarial examples:   5%|▍         | 48/1000 [1:42:58<34:37:19, 130.92s/it]
Generating adversarial examples:   5%|▍         | 49/1000 [1:44:25<31:08:08, 117.86s/it]
Generating adversarial examples:   5%|▌         | 50/1000 [1:45:53<28:42:26, 108.79s/it]
Generating adversarial examples:   5%|▌         | 51/1000 [1:46:51<24:40:24, 93.60s/it] 
Generating adversarial examples:   5%|▌         | 52/1000 [1:46:51<17:16:22, 65.59s/it]
Generating adversarial examples:   5%|▌         | 53/1000 [1:46:51<12:05:52, 45.99s/it]
Generating adversarial examples:   5%|▌         | 54/1000 [1:48:04<14:09:09, 53.86s/it]
Generating adversarial examples:   6%|▌         | 55/1000 [1:48:04<9:54:57, 37.78s/it] 
Generating adversarial examples:   6%|▌         | 56/1000 [1:49:12<12:16:10, 46.79s/it]
Generating adversarial examples:   6%|▌         | 57/1000 [1:50:33<14:55:54, 57.00s/it]
Generating adversarial examples:   6%|▌         | 58/1000 [1:51:55<16:54:11, 64.60s/it]
Generating adversarial examples:   6%|▌         | 59/1000 [1:53:06<17:23:45, 66.55s/it]
Generating adversarial examples:   6%|▌         | 60/1000 [1:54:06<16:51:31, 64.56s/it]
Generating adversarial examples:   6%|▌         | 61/1000 [1:54:06<11:48:28, 45.27s/it]
Generating adversarial examples:   6%|▌         | 62/1000 [1:55:06<12:54:51, 49.56s/it]
Generating adversarial examples:   6%|▋         | 63/1000 [1:56:03<13:29:29, 51.84s/it]
Generating adversarial examples:   6%|▋         | 64/1000 [1:56:03<9:27:11, 36.36s/it] 
Generating adversarial examples:   6%|▋         | 65/1000 [1:57:32<13:33:56, 52.23s/it]
Generating adversarial examples:   7%|▋         | 66/1000 [1:57:33<9:30:18, 36.64s/it] 
Generating adversarial examples:   7%|▋         | 67/1000 [1:59:23<15:14:55, 58.84s/it]
Generating adversarial examples:   7%|▋         | 68/1000 [2:00:29<15:47:52, 61.02s/it]
Generating adversarial examples:   7%|▋         | 69/1000 [2:00:30<11:03:57, 42.79s/it]
Generating adversarial examples:   7%|▋         | 70/1000 [2:01:35<12:46:51, 49.47s/it]
Generating adversarial examples:   7%|▋         | 71/1000 [2:04:26<22:12:59, 86.09s/it]
Generating adversarial examples:   7%|▋         | 72/1000 [2:06:50<26:37:22, 103.28s/it]
Generating adversarial examples:   7%|▋         | 73/1000 [2:06:50<18:38:06, 72.37s/it] 
Generating adversarial examples:   7%|▋         | 74/1000 [2:06:50<13:02:58, 50.73s/it]
Generating adversarial examples:   8%|▊         | 75/1000 [2:08:29<16:44:42, 65.17s/it]
Generating adversarial examples:   8%|▊         | 76/1000 [2:08:29<11:43:40, 45.69s/it]
Generating adversarial examples:   8%|▊         | 77/1000 [2:08:30<8:13:11, 32.06s/it] 
Generating adversarial examples:   8%|▊         | 78/1000 [2:10:31<15:05:40, 58.94s/it]
Generating adversarial examples:   8%|▊         | 79/1000 [2:10:31<10:34:25, 41.33s/it]
Generating adversarial examples:   8%|▊         | 80/1000 [2:14:02<23:32:40, 92.13s/it]
Generating adversarial examples:   8%|▊         | 81/1000 [2:14:02<16:28:56, 64.57s/it]
Generating adversarial examples:   8%|▊         | 82/1000 [2:14:03<11:32:38, 45.27s/it]
Generating adversarial examples:   8%|▊         | 83/1000 [2:15:05<12:51:49, 50.50s/it]
Generating adversarial examples:   8%|▊         | 84/1000 [2:16:17<14:28:51, 56.91s/it]
Generating adversarial examples:   8%|▊         | 85/1000 [2:17:32<15:49:45, 62.28s/it]
Generating adversarial examples:   9%|▊         | 86/1000 [2:17:32<11:05:13, 43.67s/it]
Generating adversarial examples:   9%|▊         | 87/1000 [2:17:32<7:46:16, 30.64s/it] 
Generating adversarial examples:   9%|▉         | 88/1000 [2:17:33<5:27:09, 21.52s/it]
Generating adversarial examples:   9%|▉         | 89/1000 [2:17:33<3:49:53, 15.14s/it]
Generating adversarial examples:   9%|▉         | 90/1000 [2:17:33<2:41:52, 10.67s/it]
Generating adversarial examples:   9%|▉         | 91/1000 [2:18:42<7:04:46, 28.04s/it]
Generating adversarial examples:   9%|▉         | 92/1000 [2:19:45<9:44:17, 38.61s/it]
Generating adversarial examples:   9%|▉         | 93/1000 [2:19:45<6:49:40, 27.10s/it]
Generating adversarial examples:   9%|▉         | 94/1000 [2:21:00<10:23:37, 41.30s/it]
Generating adversarial examples:  10%|▉         | 95/1000 [2:21:00<7:17:10, 28.98s/it] 
Generating adversarial examples:  10%|▉         | 96/1000 [2:21:00<5:06:47, 20.36s/it]
Generating adversarial examples:  10%|▉         | 97/1000 [2:21:00<3:35:38, 14.33s/it]
Generating adversarial examples:  10%|▉         | 98/1000 [2:22:25<8:50:57, 35.32s/it]
Generating adversarial examples:  10%|▉         | 99/1000 [2:22:25<6:12:22, 24.80s/it]
Generating adversarial examples:  10%|█         | 100/1000 [2:23:21<8:30:53, 34.06s/it]
Generating adversarial examples:  10%|█         | 101/1000 [2:23:21<5:58:20, 23.92s/it]
Generating adversarial examples:  10%|█         | 102/1000 [2:27:45<23:55:11, 95.89s/it]
Generating adversarial examples:  10%|█         | 103/1000 [2:27:45<16:44:37, 67.20s/it]
Generating adversarial examples:  10%|█         | 104/1000 [2:27:45<11:43:33, 47.11s/it]
Generating adversarial examples:  10%|█         | 105/1000 [2:28:45<12:39:58, 50.95s/it]
Generating adversarial examples:  11%|█         | 106/1000 [2:28:45<8:52:29, 35.74s/it] 
Generating adversarial examples:  11%|█         | 107/1000 [2:29:51<11:06:39, 44.79s/it]
Generating adversarial examples:  11%|█         | 108/1000 [2:29:52<7:47:14, 31.43s/it] 
Generating adversarial examples:  11%|█         | 109/1000 [2:32:00<14:59:20, 60.56s/it]
Generating adversarial examples:  11%|█         | 110/1000 [2:32:00<10:29:56, 42.47s/it]
Generating adversarial examples:  11%|█         | 111/1000 [2:32:54<11:19:17, 45.85s/it]
Generating adversarial examples:  11%|█         | 112/1000 [2:33:53<12:15:04, 49.67s/it]
Generating adversarial examples:  11%|█▏        | 113/1000 [2:33:53<8:35:04, 34.84s/it] 
Generating adversarial examples:  11%|█▏        | 114/1000 [2:35:27<12:55:32, 52.52s/it]
Generating adversarial examples:  12%|█▏        | 115/1000 [2:35:27<9:03:22, 36.84s/it] 
Generating adversarial examples:  12%|█▏        | 116/1000 [2:36:29<10:53:56, 44.39s/it]
Generating adversarial examples:  12%|█▏        | 117/1000 [2:38:36<16:57:46, 69.16s/it]
Generating adversarial examples:  12%|█▏        | 118/1000 [2:40:13<19:00:05, 77.56s/it]
Generating adversarial examples:  12%|█▏        | 119/1000 [2:42:36<23:46:06, 97.12s/it]
Generating adversarial examples:  12%|█▏        | 120/1000 [2:42:36<16:38:13, 68.06s/it]
Generating adversarial examples:  12%|█▏        | 121/1000 [2:44:48<21:16:09, 87.11s/it]
Generating adversarial examples:  12%|█▏        | 122/1000 [2:44:48<14:53:23, 61.05s/it]
Generating adversarial examples:  12%|█▏        | 123/1000 [2:44:48<10:25:44, 42.81s/it]
Generating adversarial examples:  12%|█▏        | 124/1000 [2:47:27<18:52:17, 77.55s/it]
Generating adversarial examples:  12%|█▎        | 125/1000 [2:49:59<24:18:55, 100.04s/it]
Generating adversarial examples:  13%|█▎        | 126/1000 [3:08:08<96:16:50, 396.58s/it]
Generating adversarial examples:  13%|█▎        | 127/1000 [3:09:19<72:29:05, 298.91s/it]
Generating adversarial examples:  13%|█▎        | 128/1000 [3:09:19<50:41:57, 209.31s/it]
Generating adversarial examples:  13%|█▎        | 129/1000 [3:10:18<39:43:44, 164.21s/it]
Generating adversarial examples:  13%|█▎        | 130/1000 [3:10:18<27:47:46, 115.02s/it]
Generating adversarial examples:  13%|█▎        | 131/1000 [3:11:15<23:33:33, 97.60s/it] 
Generating adversarial examples:  13%|█▎        | 132/1000 [3:13:36<26:40:00, 110.60s/it]
Generating adversarial examples:  13%|█▎        | 133/1000 [3:14:45<23:36:50, 98.05s/it] 
Generating adversarial examples:  13%|█▎        | 134/1000 [3:20:01<39:18:22, 163.40s/it]
Generating adversarial examples:  14%|█▎        | 135/1000 [3:21:05<32:07:49, 133.72s/it]
Generating adversarial examples:  14%|█▎        | 136/1000 [3:21:05<22:28:58, 93.68s/it] 
Generating adversarial examples:  14%|█▎        | 137/1000 [3:21:06<15:44:15, 65.65s/it]
Generating adversarial examples:  14%|█▍        | 138/1000 [3:22:59<19:09:20, 80.00s/it]
Generating adversarial examples:  14%|█▍        | 139/1000 [3:22:59<13:24:40, 56.07s/it]
Generating adversarial examples:  14%|█▍        | 140/1000 [3:24:48<17:09:41, 71.84s/it]
Generating adversarial examples:  14%|█▍        | 141/1000 [3:25:55<16:48:38, 70.45s/it]
Generating adversarial examples:  14%|█▍        | 142/1000 [3:27:01<16:29:01, 69.16s/it]
Generating adversarial examples:  14%|█▍        | 143/1000 [3:27:02<11:32:33, 48.49s/it]
Generating adversarial examples:  14%|█▍        | 144/1000 [3:30:53<24:35:36, 103.43s/it]
Generating adversarial examples:  14%|█▍        | 145/1000 [3:31:37<20:18:44, 85.53s/it] 
Generating adversarial examples:  15%|█▍        | 146/1000 [3:31:37<14:13:10, 59.94s/it]
Generating adversarial examples:  15%|█▍        | 147/1000 [3:32:58<15:38:50, 66.04s/it]
Generating adversarial examples:  15%|█▍        | 148/1000 [3:33:56<15:05:21, 63.76s/it]
Generating adversarial examples:  15%|█▍        | 149/1000 [3:34:56<14:47:27, 62.57s/it]
Generating adversarial examples:  15%|█▌        | 150/1000 [3:36:18<16:10:16, 68.49s/it]
Generating adversarial examples:  15%|█▌        | 151/1000 [3:36:18<11:19:26, 48.02s/it]
Generating adversarial examples:  15%|█▌        | 152/1000 [3:36:19<7:56:05, 33.69s/it] 
Generating adversarial examples:  15%|█▌        | 153/1000 [3:37:47<11:45:16, 49.96s/it]
Generating adversarial examples:  15%|█▌        | 154/1000 [3:40:23<19:16:37, 82.03s/it]
Generating adversarial examples:  16%|█▌        | 155/1000 [3:41:43<19:03:49, 81.22s/it]
Generating adversarial examples:  16%|█▌        | 156/1000 [3:58:56<86:01:38, 366.94s/it]
Generating adversarial examples:  16%|█▌        | 157/1000 [4:00:29<66:38:18, 284.58s/it]
Generating adversarial examples:  16%|█▌        | 158/1000 [4:02:30<55:07:39, 235.70s/it]
Generating adversarial examples:  16%|█▌        | 159/1000 [4:03:31<42:46:30, 183.10s/it]
Generating adversarial examples:  16%|█▌        | 160/1000 [4:04:35<34:23:44, 147.41s/it]
Generating adversarial examples:  16%|█▌        | 161/1000 [4:07:51<37:44:50, 161.97s/it]
Generating adversarial examples:  16%|█▌        | 162/1000 [4:07:51<26:24:32, 113.45s/it]
Generating adversarial examples:  16%|█▋        | 163/1000 [4:07:51<18:28:53, 79.49s/it] 
Generating adversarial examples:  16%|█▋        | 164/1000 [4:10:11<22:38:12, 97.48s/it]
Generating adversarial examples:  16%|█▋        | 165/1000 [4:12:01<23:29:09, 101.26s/it]
Generating adversarial examples:  17%|█▋        | 166/1000 [4:22:35<60:29:08, 261.09s/it]
Generating adversarial examples:  17%|█▋        | 167/1000 [4:22:35<42:18:23, 182.84s/it]
Generating adversarial examples:  17%|█▋        | 168/1000 [4:24:11<36:14:21, 156.80s/it]
Generating adversarial examples:  17%|█▋        | 169/1000 [4:25:48<32:01:20, 138.72s/it]
Generating adversarial examples:  17%|█▋        | 170/1000 [4:25:48<22:24:21, 97.18s/it] 
Generating adversarial examples:  17%|█▋        | 171/1000 [4:26:50<19:57:37, 86.68s/it]
Generating adversarial examples:  17%|█▋        | 172/1000 [4:26:50<13:58:21, 60.75s/it]
Generating adversarial examples:  17%|█▋        | 173/1000 [4:28:39<17:17:06, 75.24s/it]
Generating adversarial examples:  17%|█▋        | 174/1000 [4:29:41<16:18:11, 71.05s/it]
Generating adversarial examples:  18%|█▊        | 175/1000 [4:32:47<24:11:17, 105.55s/it]
Generating adversarial examples:  18%|█▊        | 176/1000 [4:33:49<21:12:56, 92.69s/it] 
Generating adversarial examples:  18%|█▊        | 177/1000 [4:33:50<14:50:59, 64.96s/it]
Generating adversarial examples:  18%|█▊        | 178/1000 [4:33:50<10:23:56, 45.54s/it]
Generating adversarial examples:  18%|█▊        | 179/1000 [4:33:50<7:17:14, 31.95s/it] 
Generating adversarial examples:  18%|█▊        | 180/1000 [4:36:15<14:58:51, 65.77s/it]
Generating adversarial examples:  18%|█▊        | 181/1000 [4:37:18<14:46:26, 64.94s/it]
Generating adversarial examples:  18%|█▊        | 182/1000 [4:38:17<14:21:32, 63.19s/it]
Generating adversarial examples:  18%|█▊        | 183/1000 [4:39:23<14:33:15, 64.13s/it]
Generating adversarial examples:  18%|█▊        | 184/1000 [4:41:30<18:46:19, 82.82s/it]
Generating adversarial examples:  18%|█▊        | 185/1000 [4:43:32<21:27:13, 94.76s/it]
Generating adversarial examples:  19%|█▊        | 186/1000 [4:44:40<19:33:20, 86.49s/it]
Generating adversarial examples:  19%|█▊        | 187/1000 [5:01:43<82:58:50, 367.44s/it]
Generating adversarial examples:  19%|█▉        | 188/1000 [5:01:43<58:01:54, 257.28s/it]
Generating adversarial examples:  19%|█▉        | 189/1000 [5:02:45<44:47:08, 198.80s/it]
Generating adversarial examples:  19%|█▉        | 190/1000 [5:04:36<38:48:21, 172.47s/it]
Generating adversarial examples:  19%|█▉        | 191/1000 [5:05:41<31:30:40, 140.22s/it]
Generating adversarial examples:  19%|█▉        | 192/1000 [5:05:41<22:02:49, 98.23s/it] 
Generating adversarial examples:  19%|█▉        | 193/1000 [5:09:14<29:42:34, 132.53s/it]
Generating adversarial examples:  19%|█▉        | 194/1000 [5:09:14<20:47:15, 92.85s/it] 
Generating adversarial examples:  20%|█▉        | 195/1000 [5:12:02<25:46:19, 115.25s/it]
Generating adversarial examples:  20%|█▉        | 196/1000 [5:14:05<26:17:29, 117.72s/it]
Generating adversarial examples:  20%|█▉        | 197/1000 [5:15:06<22:27:46, 100.71s/it]
Generating adversarial examples:  20%|█▉        | 198/1000 [5:16:07<19:44:18, 88.60s/it] 
Generating adversarial examples:  20%|█▉        | 199/1000 [5:16:07<13:48:58, 62.10s/it]
Generating adversarial examples:  20%|██        | 200/1000 [5:16:07<9:40:32, 43.54s/it] 
Generating adversarial examples:  20%|██        | 201/1000 [5:17:36<12:39:51, 57.06s/it]
Generating adversarial examples:  20%|██        | 202/1000 [5:17:36<8:52:12, 40.02s/it] 
Generating adversarial examples:  20%|██        | 203/1000 [5:20:22<17:12:53, 77.76s/it]
Generating adversarial examples:  20%|██        | 204/1000 [5:20:22<12:03:05, 54.50s/it]
Generating adversarial examples:  20%|██        | 205/1000 [5:21:21<12:18:27, 55.73s/it]
Generating adversarial examples:  21%|██        | 206/1000 [5:21:21<8:37:14, 39.09s/it] 
Generating adversarial examples:  21%|██        | 207/1000 [5:21:21<6:02:35, 27.43s/it]
Generating adversarial examples:  21%|██        | 208/1000 [5:23:13<11:36:47, 52.79s/it]
Generating adversarial examples:  21%|██        | 209/1000 [5:25:02<15:17:20, 69.58s/it]
Generating adversarial examples:  21%|██        | 210/1000 [5:25:02<10:42:18, 48.78s/it]
Generating adversarial examples:  21%|██        | 211/1000 [5:25:02<7:30:00, 34.22s/it] 
Generating adversarial examples:  21%|██        | 212/1000 [5:28:23<18:26:57, 84.29s/it]
Generating adversarial examples:  21%|██▏       | 213/1000 [5:28:24<12:54:51, 59.07s/it]
Generating adversarial examples:  21%|██▏       | 214/1000 [5:29:19<12:37:35, 57.83s/it]
Generating adversarial examples:  22%|██▏       | 215/1000 [5:29:19<8:50:36, 40.56s/it] 
Generating adversarial examples:  22%|██▏       | 216/1000 [5:32:43<19:30:53, 89.61s/it]
Generating adversarial examples:  22%|██▏       | 217/1000 [5:32:43<13:39:32, 62.80s/it]
Generating adversarial examples:  22%|██▏       | 218/1000 [5:35:24<20:00:42, 92.13s/it]
Generating adversarial examples:  22%|██▏       | 219/1000 [5:35:24<14:00:23, 64.56s/it]
Generating adversarial examples:  22%|██▏       | 220/1000 [5:37:21<17:25:21, 80.41s/it]
Generating adversarial examples:  22%|██▏       | 221/1000 [5:55:51<84:14:00, 389.27s/it]
Generating adversarial examples:  22%|██▏       | 222/1000 [5:55:52<58:54:13, 272.56s/it]
Generating adversarial examples:  22%|██▏       | 223/1000 [5:55:52<41:11:43, 190.87s/it]
Generating adversarial examples:  22%|██▏       | 224/1000 [5:57:02<33:20:34, 154.68s/it]
Generating adversarial examples:  22%|██▎       | 225/1000 [5:58:02<27:10:14, 126.21s/it]
Generating adversarial examples:  23%|██▎       | 226/1000 [6:00:01<26:40:10, 124.04s/it]
Generating adversarial examples:  23%|██▎       | 227/1000 [6:00:01<18:39:37, 86.91s/it] 
Generating adversarial examples:  23%|██▎       | 228/1000 [6:01:17<17:55:49, 83.61s/it]
Generating adversarial examples:  23%|██▎       | 229/1000 [6:04:02<23:06:25, 107.89s/it]
Generating adversarial examples:  23%|██▎       | 230/1000 [6:04:58<19:47:23, 92.52s/it] 
Generating adversarial examples:  23%|██▎       | 231/1000 [6:04:58<13:51:02, 64.84s/it]
Generating adversarial examples:  23%|██▎       | 232/1000 [6:06:42<16:19:27, 76.52s/it]
Generating adversarial examples:  23%|██▎       | 233/1000 [6:06:42<11:25:40, 53.64s/it]
Generating adversarial examples:  23%|██▎       | 234/1000 [6:09:57<20:23:26, 95.83s/it]
Generating adversarial examples:  24%|██▎       | 235/1000 [6:14:13<30:35:46, 143.98s/it]
Generating adversarial examples:  24%|██▎       | 236/1000 [6:14:13<21:24:18, 100.86s/it]
Generating adversarial examples:  24%|██▎       | 237/1000 [6:15:42<20:35:01, 97.12s/it] 
Generating adversarial examples:  24%|██▍       | 238/1000 [6:16:51<18:48:12, 88.84s/it]
Generating adversarial examples:  24%|██▍       | 239/1000 [6:17:59<17:26:14, 82.49s/it]
Generating adversarial examples:  24%|██▍       | 240/1000 [6:17:59<12:12:20, 57.82s/it]
Generating adversarial examples:  24%|██▍       | 241/1000 [6:19:39<14:49:59, 70.35s/it]
Generating adversarial examples:  24%|██▍       | 242/1000 [6:19:39<10:23:06, 49.32s/it]
Generating adversarial examples:  24%|██▍       | 243/1000 [6:19:39<7:16:31, 34.60s/it] 
Generating adversarial examples:  24%|██▍       | 244/1000 [6:21:05<10:30:35, 50.05s/it]
Generating adversarial examples:  24%|██▍       | 245/1000 [6:22:03<10:59:09, 52.38s/it]
Generating adversarial examples:  25%|██▍       | 246/1000 [6:22:03<7:41:43, 36.74s/it] 
Generating adversarial examples:  25%|██▍       | 247/1000 [6:24:19<13:55:05, 66.54s/it]
Generating adversarial examples:  25%|██▍       | 248/1000 [6:27:07<20:15:23, 96.97s/it]
Generating adversarial examples:  25%|██▍       | 249/1000 [6:28:48<20:28:42, 98.17s/it]
Generating adversarial examples:  25%|██▌       | 250/1000 [6:28:49<14:19:52, 68.79s/it]
Generating adversarial examples:  25%|██▌       | 251/1000 [6:30:25<16:00:10, 76.92s/it]
Generating adversarial examples:  25%|██▌       | 252/1000 [6:31:26<15:00:37, 72.24s/it]
Generating adversarial examples:  25%|██▌       | 253/1000 [6:31:26<10:30:31, 50.64s/it]
Generating adversarial examples:  25%|██▌       | 254/1000 [6:33:28<14:56:11, 72.08s/it]
Generating adversarial examples:  26%|██▌       | 255/1000 [6:34:25<13:58:13, 67.51s/it]
Generating adversarial examples:  26%|██▌       | 256/1000 [6:35:28<13:41:06, 66.22s/it]
Generating adversarial examples:  26%|██▌       | 257/1000 [6:35:29<9:34:55, 46.43s/it] 
Generating adversarial examples:  26%|██▌       | 258/1000 [6:35:29<6:42:48, 32.57s/it]
Generating adversarial examples:  26%|██▌       | 259/1000 [6:35:29<4:42:30, 22.87s/it]
Generating adversarial examples:  26%|██▌       | 260/1000 [6:37:36<11:06:38, 54.05s/it]
Generating adversarial examples:  26%|██▌       | 261/1000 [6:38:49<12:18:10, 59.93s/it]
Generating adversarial examples:  26%|██▌       | 262/1000 [6:39:53<12:29:14, 60.91s/it]
Generating adversarial examples:  26%|██▋       | 263/1000 [6:46:14<32:09:51, 157.11s/it]
Generating adversarial examples:  26%|██▋       | 264/1000 [6:48:37<31:15:32, 152.90s/it]
Generating adversarial examples:  26%|██▋       | 265/1000 [6:52:39<36:39:08, 179.52s/it]
Generating adversarial examples:  27%|██▋       | 266/1000 [6:54:02<30:42:48, 150.64s/it]
Generating adversarial examples:  27%|██▋       | 267/1000 [6:55:03<25:09:51, 123.59s/it]
Generating adversarial examples:  27%|██▋       | 268/1000 [6:55:03<17:36:21, 86.59s/it] 
Generating adversarial examples:  27%|██▋       | 269/1000 [6:56:02<15:55:16, 78.41s/it]
Generating adversarial examples:  27%|██▋       | 270/1000 [6:56:02<11:08:40, 54.96s/it]
Generating adversarial examples:  27%|██▋       | 271/1000 [6:56:03<7:48:19, 38.55s/it] 
Generating adversarial examples:  27%|██▋       | 272/1000 [6:57:56<12:17:50, 60.81s/it]
Generating adversarial examples:  27%|██▋       | 273/1000 [6:58:54<12:07:47, 60.06s/it]
Generating adversarial examples:  27%|██▋       | 274/1000 [6:59:57<12:16:57, 60.91s/it]
Generating adversarial examples:  28%|██▊       | 275/1000 [7:00:58<12:15:55, 60.90s/it]
Generating adversarial examples:  28%|██▊       | 276/1000 [7:05:13<23:58:27, 119.21s/it]
Generating adversarial examples:  28%|██▊       | 277/1000 [7:09:51<33:29:54, 166.80s/it]
Generating adversarial examples:  28%|██▊       | 278/1000 [7:10:49<26:54:49, 134.20s/it]
Generating adversarial examples:  28%|██▊       | 279/1000 [7:13:48<29:36:26, 147.83s/it]
Generating adversarial examples:  28%|██▊       | 280/1000 [7:17:53<35:21:41, 176.81s/it]
Generating adversarial examples:  28%|██▊       | 281/1000 [7:19:58<32:13:56, 161.39s/it]
Generating adversarial examples:  28%|██▊       | 282/1000 [7:21:01<26:17:59, 131.87s/it]
Generating adversarial examples:  28%|██▊       | 283/1000 [7:21:02<18:23:56, 92.38s/it] 
Generating adversarial examples:  28%|██▊       | 284/1000 [7:22:06<16:41:43, 83.94s/it]
Generating adversarial examples:  28%|██▊       | 285/1000 [7:22:06<11:41:06, 58.83s/it]
Generating adversarial examples:  29%|██▊       | 286/1000 [7:40:29<73:48:51, 372.17s/it]
Generating adversarial examples:  29%|██▊       | 287/1000 [7:41:32<55:20:17, 279.41s/it]
Generating adversarial examples:  29%|██▉       | 288/1000 [7:42:38<42:34:28, 215.27s/it]
Generating adversarial examples:  29%|██▉       | 289/1000 [7:42:38<29:46:29, 150.76s/it]
Generating adversarial examples:  29%|██▉       | 290/1000 [7:42:38<20:49:39, 105.61s/it]
Generating adversarial examples:  29%|██▉       | 291/1000 [7:42:39<14:34:24, 74.00s/it] 
Generating adversarial examples:  29%|██▉       | 292/1000 [7:44:16<15:55:00, 80.93s/it]
Generating adversarial examples:  29%|██▉       | 293/1000 [7:44:16<11:08:26, 56.73s/it]
Generating adversarial examples:  29%|██▉       | 294/1000 [7:46:57<17:14:04, 87.88s/it]
Generating adversarial examples:  30%|██▉       | 295/1000 [7:47:59<15:41:20, 80.11s/it]
Generating adversarial examples:  30%|██▉       | 296/1000 [7:47:59<10:58:52, 56.15s/it]
Generating adversarial examples:  30%|██▉       | 297/1000 [7:47:59<7:41:24, 39.38s/it] 
Generating adversarial examples:  30%|██▉       | 298/1000 [7:49:04<9:10:41, 47.07s/it]
Generating adversarial examples:  30%|██▉       | 299/1000 [7:49:04<6:25:47, 33.02s/it]
Generating adversarial examples:  30%|███       | 300/1000 [7:51:22<12:31:41, 64.43s/it]
Generating adversarial examples:  30%|███       | 301/1000 [7:52:51<13:54:57, 71.67s/it]
Generating adversarial examples:  30%|███       | 302/1000 [7:52:51<9:44:29, 50.24s/it] 
Generating adversarial examples:  30%|███       | 303/1000 [7:52:51<6:49:25, 35.24s/it]
Generating adversarial examples:  30%|███       | 304/1000 [7:54:00<8:47:05, 45.44s/it]
Generating adversarial examples:  30%|███       | 305/1000 [7:55:08<10:02:34, 52.02s/it]
Generating adversarial examples:  31%|███       | 306/1000 [7:56:29<11:44:44, 60.93s/it]
Generating adversarial examples:  31%|███       | 307/1000 [7:57:30<11:43:07, 60.88s/it]
Generating adversarial examples:  31%|███       | 308/1000 [7:59:10<13:57:29, 72.62s/it]
Generating adversarial examples:  31%|███       | 309/1000 [8:02:35<21:32:46, 112.25s/it]
Generating adversarial examples:  31%|███       | 310/1000 [8:03:59<19:52:17, 103.68s/it]
Generating adversarial examples:  31%|███       | 311/1000 [8:05:43<19:54:56, 104.06s/it]
Generating adversarial examples:  31%|███       | 312/1000 [8:05:44<13:56:05, 72.92s/it] 
Generating adversarial examples:  31%|███▏      | 313/1000 [8:05:44<9:45:15, 51.11s/it] 
Generating adversarial examples:  31%|███▏      | 314/1000 [8:07:37<13:15:14, 69.56s/it]
Generating adversarial examples:  32%|███▏      | 315/1000 [8:09:00<14:01:37, 73.72s/it]
Generating adversarial examples:  32%|███▏      | 316/1000 [8:10:12<13:56:03, 73.34s/it]
Generating adversarial examples:  32%|███▏      | 317/1000 [8:12:12<16:32:57, 87.23s/it]
Generating adversarial examples:  32%|███▏      | 318/1000 [8:29:29<70:31:36, 372.28s/it]
Generating adversarial examples:  32%|███▏      | 319/1000 [8:30:49<53:48:27, 284.45s/it]
Generating adversarial examples:  32%|███▏      | 320/1000 [8:30:49<37:37:26, 199.19s/it]
Generating adversarial examples:  32%|███▏      | 321/1000 [8:31:51<29:47:52, 157.99s/it]
Generating adversarial examples:  32%|███▏      | 322/1000 [8:50:13<83:04:33, 441.11s/it]
Generating adversarial examples:  32%|███▏      | 323/1000 [8:50:13<58:04:53, 308.85s/it]
Generating adversarial examples:  32%|███▏      | 324/1000 [8:51:15<44:04:23, 234.71s/it]
Generating adversarial examples:  32%|███▎      | 325/1000 [8:52:24<34:40:18, 184.92s/it]
Generating adversarial examples:  33%|███▎      | 326/1000 [8:53:20<27:25:52, 146.52s/it]
Generating adversarial examples:  33%|███▎      | 327/1000 [8:55:11<25:21:55, 135.68s/it]
Generating adversarial examples:  33%|███▎      | 328/1000 [8:55:11<17:44:35, 95.05s/it] 
Generating adversarial examples:  33%|███▎      | 329/1000 [8:55:11<12:24:55, 66.61s/it]
Generating adversarial examples:  33%|███▎      | 330/1000 [8:55:12<8:41:30, 46.70s/it] 
Generating adversarial examples:  33%|███▎      | 331/1000 [8:57:19<13:09:32, 70.81s/it]
Generating adversarial examples:  33%|███▎      | 332/1000 [8:58:17<12:27:46, 67.16s/it]
Generating adversarial examples:  33%|███▎      | 333/1000 [8:58:18<8:43:28, 47.09s/it] 
Generating adversarial examples:  33%|███▎      | 334/1000 [8:59:37<10:30:41, 56.82s/it]
Generating adversarial examples:  34%|███▎      | 335/1000 [8:59:37<7:21:38, 39.85s/it] 
Generating adversarial examples:  34%|███▎      | 336/1000 [9:00:55<9:26:32, 51.19s/it]
Generating adversarial examples:  34%|███▎      | 337/1000 [9:01:52<9:45:21, 52.97s/it]
Generating adversarial examples:  34%|███▍      | 338/1000 [9:05:35<19:08:13, 104.07s/it]
Generating adversarial examples:  34%|███▍      | 339/1000 [9:06:38<16:50:30, 91.73s/it] 
Generating adversarial examples:  34%|███▍      | 340/1000 [9:06:39<11:47:06, 64.28s/it]
Generating adversarial examples:  34%|███▍      | 341/1000 [9:06:39<8:15:02, 45.07s/it] 
Generating adversarial examples:  34%|███▍      | 342/1000 [9:07:49<9:35:59, 52.52s/it]
Generating adversarial examples:  34%|███▍      | 343/1000 [9:09:16<11:29:38, 62.98s/it]
Generating adversarial examples:  34%|███▍      | 344/1000 [9:10:36<12:24:10, 68.06s/it]
Generating adversarial examples:  34%|███▍      | 345/1000 [9:10:36<8:40:56, 47.72s/it] 
Generating adversarial examples:  35%|███▍      | 346/1000 [9:11:40<9:33:42, 52.63s/it]
Generating adversarial examples:  35%|███▍      | 347/1000 [9:11:41<6:41:47, 36.92s/it]
Generating adversarial examples:  35%|███▍      | 348/1000 [9:11:41<4:41:37, 25.92s/it]
Generating adversarial examples:  35%|███▍      | 349/1000 [9:15:16<14:56:48, 82.66s/it]
Generating adversarial examples:  35%|███▌      | 350/1000 [9:16:22<14:01:37, 77.69s/it]
Generating adversarial examples:  35%|███▌      | 351/1000 [9:17:36<13:48:27, 76.59s/it]
Generating adversarial examples:  35%|███▌      | 352/1000 [9:18:47<13:27:19, 74.75s/it]
Generating adversarial examples:  35%|███▌      | 353/1000 [9:23:40<25:13:32, 140.36s/it]
Generating adversarial examples:  35%|███▌      | 354/1000 [9:25:12<22:34:29, 125.80s/it]
Generating adversarial examples:  36%|███▌      | 355/1000 [9:26:24<19:40:40, 109.83s/it]
Generating adversarial examples:  36%|███▌      | 356/1000 [9:26:25<13:45:58, 76.95s/it] 
Generating adversarial examples:  36%|███▌      | 357/1000 [9:27:27<12:57:05, 72.51s/it]
Generating adversarial examples:  36%|███▌      | 358/1000 [9:27:27<9:03:54, 50.83s/it] 
Generating adversarial examples:  36%|███▌      | 359/1000 [9:27:27<6:20:56, 35.66s/it]
Generating adversarial examples:  36%|███▌      | 360/1000 [9:27:27<4:27:01, 25.03s/it]
Generating adversarial examples:  36%|███▌      | 361/1000 [9:28:27<6:16:49, 35.38s/it]
Generating adversarial examples:  36%|███▌      | 362/1000 [9:29:59<9:16:58, 52.38s/it]
Generating adversarial examples:  36%|███▋      | 363/1000 [9:31:20<10:46:07, 60.86s/it]
Generating adversarial examples:  36%|███▋      | 364/1000 [9:32:32<11:22:58, 64.43s/it]
Generating adversarial examples:  36%|███▋      | 365/1000 [9:35:23<16:57:17, 96.12s/it]
Generating adversarial examples:  37%|███▋      | 366/1000 [9:36:27<15:14:28, 86.54s/it]
Generating adversarial examples:  37%|███▋      | 367/1000 [9:37:48<14:55:41, 84.90s/it]
Generating adversarial examples:  37%|███▋      | 368/1000 [9:37:48<10:26:46, 59.50s/it]
Generating adversarial examples:  37%|███▋      | 369/1000 [9:56:18<65:40:23, 374.68s/it]
Generating adversarial examples:  37%|███▋      | 370/1000 [9:56:18<45:54:40, 262.35s/it]
Generating adversarial examples:  37%|███▋      | 371/1000 [9:57:58<37:19:28, 213.62s/it]
Generating adversarial examples:  37%|███▋      | 372/1000 [10:01:52<38:19:12, 219.67s/it]
Generating adversarial examples:  37%|███▋      | 373/1000 [10:03:12<30:57:50, 177.78s/it]
Generating adversarial examples:  37%|███▋      | 374/1000 [10:03:12<21:39:10, 124.52s/it]
Generating adversarial examples:  38%|███▊      | 375/1000 [10:04:14<18:20:59, 105.70s/it]
Generating adversarial examples:  38%|███▊      | 376/1000 [10:05:07<15:34:04, 89.81s/it] 
Generating adversarial examples:  38%|███▊      | 377/1000 [10:05:07<10:53:33, 62.94s/it]
Generating adversarial examples:  38%|███▊      | 378/1000 [10:07:02<13:33:48, 78.50s/it]
Generating adversarial examples:  38%|███▊      | 379/1000 [10:11:30<23:19:31, 135.22s/it]
Generating adversarial examples:  38%|███▊      | 380/1000 [10:11:30<16:18:51, 94.73s/it] 
Generating adversarial examples:  38%|███▊      | 381/1000 [10:12:28<14:25:00, 83.84s/it]
Generating adversarial examples:  38%|███▊      | 382/1000 [10:12:28<10:05:16, 58.77s/it]
Generating adversarial examples:  38%|███▊      | 383/1000 [10:12:29<7:03:46, 41.21s/it] 
Generating adversarial examples:  38%|███▊      | 384/1000 [10:12:29<4:56:54, 28.92s/it]
Generating adversarial examples:  38%|███▊      | 385/1000 [10:12:29<3:28:16, 20.32s/it]
Generating adversarial examples:  39%|███▊      | 386/1000 [10:14:08<7:29:33, 43.93s/it]
Generating adversarial examples:  39%|███▊      | 387/1000 [10:14:08<5:14:55, 30.82s/it]
Generating adversarial examples:  39%|███▉      | 388/1000 [10:15:14<7:00:14, 41.20s/it]
Generating adversarial examples:  39%|███▉      | 389/1000 [10:16:32<8:53:37, 52.40s/it]
Generating adversarial examples:  39%|███▉      | 390/1000 [10:17:34<9:21:42, 55.25s/it]
Generating adversarial examples:  39%|███▉      | 391/1000 [10:18:42<9:58:42, 58.99s/it]
Generating adversarial examples:  39%|███▉      | 392/1000 [10:20:09<11:21:46, 67.28s/it]
Generating adversarial examples:  39%|███▉      | 393/1000 [10:21:24<11:45:51, 69.77s/it]
Generating adversarial examples:  39%|███▉      | 394/1000 [10:21:24<8:14:02, 48.91s/it] 
Generating adversarial examples:  40%|███▉      | 395/1000 [10:22:51<10:07:41, 60.27s/it]
Generating adversarial examples:  40%|███▉      | 396/1000 [10:22:51<7:05:25, 42.26s/it] 
Generating adversarial examples:  40%|███▉      | 397/1000 [10:23:55<8:09:01, 48.66s/it]
Generating adversarial examples:  40%|███▉      | 398/1000 [10:25:16<9:45:11, 58.33s/it]
Generating adversarial examples:  40%|███▉      | 399/1000 [10:26:30<10:32:22, 63.13s/it]
Generating adversarial examples:  40%|████      | 400/1000 [10:29:32<16:28:10, 98.82s/it]
Generating adversarial examples:  40%|████      | 401/1000 [10:30:30<14:21:52, 86.33s/it]
Generating adversarial examples:  40%|████      | 402/1000 [10:30:30<10:03:02, 60.51s/it]
Generating adversarial examples:  40%|████      | 403/1000 [10:31:36<10:20:23, 62.35s/it]
Generating adversarial examples:  40%|████      | 404/1000 [10:32:50<10:54:00, 65.84s/it]
Generating adversarial examples:  40%|████      | 405/1000 [10:32:51<7:37:45, 46.16s/it] 
Generating adversarial examples:  41%|████      | 406/1000 [10:50:51<58:48:14, 356.39s/it]
Generating adversarial examples:  41%|████      | 407/1000 [10:51:52<44:07:40, 267.89s/it]
Generating adversarial examples:  41%|████      | 408/1000 [10:51:53<30:50:58, 187.60s/it]
Generating adversarial examples:  41%|████      | 409/1000 [10:52:58<24:47:41, 151.03s/it]
Generating adversarial examples:  41%|████      | 410/1000 [10:52:59<17:20:20, 105.80s/it]
Generating adversarial examples:  41%|████      | 411/1000 [10:52:59<12:07:43, 74.13s/it] 
Generating adversarial examples:  41%|████      | 412/1000 [10:54:50<13:56:17, 85.34s/it]
Generating adversarial examples:  41%|████▏     | 413/1000 [10:55:49<12:35:57, 77.27s/it]
Generating adversarial examples:  41%|████▏     | 414/1000 [11:14:02<62:11:09, 382.03s/it]
Generating adversarial examples:  42%|████▏     | 415/1000 [11:16:25<50:24:28, 310.20s/it]
Generating adversarial examples:  42%|████▏     | 416/1000 [11:16:25<35:14:14, 217.22s/it]
Generating adversarial examples:  42%|████▏     | 417/1000 [11:19:10<32:37:58, 201.51s/it]
Generating adversarial examples:  42%|████▏     | 418/1000 [11:19:10<22:48:56, 141.13s/it]
Generating adversarial examples:  42%|████▏     | 419/1000 [11:19:10<15:57:19, 98.86s/it] 
Generating adversarial examples:  42%|████▏     | 420/1000 [11:19:10<11:09:41, 69.28s/it]
Generating adversarial examples:  42%|████▏     | 421/1000 [11:19:11<7:48:41, 48.57s/it] 
Generating adversarial examples:  42%|████▏     | 422/1000 [11:20:43<9:53:40, 61.63s/it]
Generating adversarial examples:  42%|████▏     | 423/1000 [11:20:43<6:55:33, 43.21s/it]
Generating adversarial examples:  42%|████▏     | 424/1000 [11:20:43<4:51:06, 30.32s/it]
Generating adversarial examples:  42%|████▎     | 425/1000 [11:21:48<6:30:31, 40.75s/it]
Generating adversarial examples:  43%|████▎     | 426/1000 [11:23:06<8:16:12, 51.87s/it]
Generating adversarial examples:  43%|████▎     | 427/1000 [11:27:09<17:22:46, 109.19s/it]
Generating adversarial examples:  43%|████▎     | 428/1000 [11:30:52<22:45:48, 143.27s/it]
Generating adversarial examples:  43%|████▎     | 429/1000 [11:32:15<19:52:49, 125.34s/it]
Generating adversarial examples:  43%|████▎     | 430/1000 [11:32:16<13:54:13, 87.81s/it] 
Generating adversarial examples:  43%|████▎     | 431/1000 [11:33:41<13:46:15, 87.13s/it]
Generating adversarial examples:  43%|████▎     | 432/1000 [11:34:47<12:45:05, 80.82s/it]
Generating adversarial examples:  43%|████▎     | 433/1000 [11:36:53<14:52:10, 94.41s/it]
Generating adversarial examples:  43%|████▎     | 434/1000 [11:38:12<14:06:44, 89.76s/it]
Generating adversarial examples:  44%|████▎     | 435/1000 [11:39:10<12:34:44, 80.15s/it]
Generating adversarial examples:  44%|████▎     | 436/1000 [11:40:47<13:21:31, 85.27s/it]
Generating adversarial examples:  44%|████▎     | 437/1000 [11:41:37<11:39:52, 74.59s/it]
Generating adversarial examples:  44%|████▍     | 438/1000 [11:42:53<11:43:37, 75.12s/it]
Generating adversarial examples:  44%|████▍     | 439/1000 [11:42:53<8:12:20, 52.66s/it] 
Generating adversarial examples:  44%|████▍     | 440/1000 [11:43:42<8:01:26, 51.58s/it]
Generating adversarial examples:  44%|████▍     | 441/1000 [11:43:43<5:37:05, 36.18s/it]
Generating adversarial examples:  44%|████▍     | 442/1000 [11:45:13<8:08:05, 52.48s/it]
Generating adversarial examples:  44%|████▍     | 443/1000 [11:45:14<5:41:44, 36.81s/it]
Generating adversarial examples:  44%|████▍     | 444/1000 [11:46:11<6:39:08, 43.07s/it]
Generating adversarial examples:  44%|████▍     | 445/1000 [11:47:26<8:06:16, 52.57s/it]
Generating adversarial examples:  45%|████▍     | 446/1000 [11:48:40<9:06:18, 59.17s/it]
Generating adversarial examples:  45%|████▍     | 447/1000 [11:48:41<6:22:24, 41.49s/it]
Generating adversarial examples:  45%|████▍     | 448/1000 [11:48:41<4:27:52, 29.12s/it]
Generating adversarial examples:  45%|████▍     | 449/1000 [11:48:41<3:07:50, 20.46s/it]
Generating adversarial examples:  45%|████▌     | 450/1000 [11:51:28<9:50:08, 64.38s/it]
Generating adversarial examples:  45%|████▌     | 451/1000 [11:52:30<9:42:29, 63.66s/it]
Generating adversarial examples:  45%|████▌     | 452/1000 [11:52:30<6:47:40, 44.64s/it]
Generating adversarial examples:  45%|████▌     | 453/1000 [11:52:31<4:45:31, 31.32s/it]
Generating adversarial examples:  45%|████▌     | 454/1000 [11:52:31<3:20:10, 22.00s/it]
Generating adversarial examples:  46%|████▌     | 455/1000 [11:52:31<2:20:32, 15.47s/it]
Generating adversarial examples:  46%|████▌     | 456/1000 [11:55:01<8:26:38, 55.88s/it]
Generating adversarial examples:  46%|████▌     | 457/1000 [11:55:01<5:54:40, 39.19s/it]
Generating adversarial examples:  46%|████▌     | 458/1000 [11:55:02<4:08:28, 27.51s/it]
Generating adversarial examples:  46%|████▌     | 459/1000 [11:58:54<13:21:43, 88.92s/it]
Generating adversarial examples:  46%|████▌     | 460/1000 [11:59:57<12:09:12, 81.02s/it]
Generating adversarial examples:  46%|████▌     | 461/1000 [12:00:54<11:03:13, 73.83s/it]
Generating adversarial examples:  46%|████▌     | 462/1000 [12:02:36<12:18:51, 82.40s/it]
Generating adversarial examples:  46%|████▋     | 463/1000 [12:04:15<13:02:45, 87.46s/it]
Generating adversarial examples:  46%|████▋     | 464/1000 [12:04:15<9:07:34, 61.30s/it] 
Generating adversarial examples:  46%|████▋     | 465/1000 [12:05:22<9:19:17, 62.73s/it]
Generating adversarial examples:  47%|████▋     | 466/1000 [12:06:55<10:41:05, 72.03s/it]
Generating adversarial examples:  47%|████▋     | 467/1000 [12:06:56<7:28:34, 50.50s/it] 
Generating adversarial examples:  47%|████▋     | 468/1000 [12:07:58<8:00:18, 54.17s/it]
Generating adversarial examples:  47%|████▋     | 469/1000 [12:07:59<5:36:14, 37.99s/it]
Generating adversarial examples:  47%|████▋     | 470/1000 [12:10:51<11:31:29, 78.28s/it]
Generating adversarial examples:  47%|████▋     | 471/1000 [12:11:49<10:38:16, 72.39s/it]
Generating adversarial examples:  47%|████▋     | 472/1000 [12:11:50<7:26:35, 50.75s/it] 
Generating adversarial examples:  47%|████▋     | 473/1000 [12:12:52<7:57:28, 54.36s/it]
Generating adversarial examples:  47%|████▋     | 474/1000 [12:14:51<10:44:43, 73.54s/it]
Generating adversarial examples:  48%|████▊     | 475/1000 [12:15:53<10:13:09, 70.07s/it]
Generating adversarial examples:  48%|████▊     | 476/1000 [12:15:53<7:09:02, 49.13s/it] 
Generating adversarial examples:  48%|████▊     | 477/1000 [12:17:30<9:13:29, 63.50s/it]
Generating adversarial examples:  48%|████▊     | 478/1000 [12:18:41<9:31:35, 65.70s/it]
Generating adversarial examples:  48%|████▊     | 479/1000 [12:21:06<12:57:35, 89.55s/it]
Generating adversarial examples:  48%|████▊     | 480/1000 [12:22:18<12:09:54, 84.22s/it]
Generating adversarial examples:  48%|████▊     | 481/1000 [12:25:22<16:28:41, 114.30s/it]
Generating adversarial examples:  48%|████▊     | 482/1000 [12:25:23<11:31:23, 80.08s/it] 
Generating adversarial examples:  48%|████▊     | 483/1000 [12:27:13<12:49:05, 89.26s/it]
Generating adversarial examples:  48%|████▊     | 484/1000 [12:28:21<11:52:57, 82.90s/it]
Generating adversarial examples:  48%|████▊     | 485/1000 [12:28:22<8:18:44, 58.11s/it] 
Generating adversarial examples:  49%|████▊     | 486/1000 [12:29:46<9:24:41, 65.92s/it]
Generating adversarial examples:  49%|████▊     | 487/1000 [12:31:42<11:31:44, 80.91s/it]
Generating adversarial examples:  49%|████▉     | 488/1000 [12:32:42<10:38:56, 74.88s/it]
Generating adversarial examples:  49%|████▉     | 489/1000 [12:32:43<7:27:01, 52.49s/it] 
Generating adversarial examples:  49%|████▉     | 490/1000 [12:32:43<5:12:55, 36.82s/it]
Generating adversarial examples:  49%|████▉     | 491/1000 [12:34:24<7:57:03, 56.23s/it]
Generating adversarial examples:  49%|████▉     | 492/1000 [12:38:01<14:44:09, 104.43s/it]
Generating adversarial examples:  49%|████▉     | 493/1000 [12:43:39<24:34:04, 174.45s/it]
Generating adversarial examples:  49%|████▉     | 494/1000 [12:43:39<17:10:26, 122.19s/it]
Generating adversarial examples:  50%|████▉     | 495/1000 [12:44:22<13:47:28, 98.31s/it] 
Generating adversarial examples:  50%|████▉     | 496/1000 [12:45:17<11:57:51, 85.46s/it]
Generating adversarial examples:  50%|████▉     | 497/1000 [12:46:32<11:29:11, 82.21s/it]
Generating adversarial examples:  50%|████▉     | 498/1000 [12:47:54<11:27:26, 82.17s/it]
Generating adversarial examples:  50%|████▉     | 499/1000 [12:52:11<18:43:24, 134.54s/it]
Generating adversarial examples:  50%|█████     | 500/1000 [12:53:43<16:54:42, 121.76s/it]
Generating adversarial examples:  50%|█████     | 501/1000 [12:53:43<11:49:29, 85.31s/it] 
Generating adversarial examples:  50%|█████     | 502/1000 [12:53:43<8:16:15, 59.79s/it] 
Generating adversarial examples:  50%|█████     | 503/1000 [12:53:44<5:47:18, 41.93s/it]
Generating adversarial examples:  50%|█████     | 504/1000 [12:55:31<8:28:08, 61.47s/it]
Generating adversarial examples:  50%|█████     | 505/1000 [12:55:31<5:55:35, 43.10s/it]
Generating adversarial examples:  51%|█████     | 506/1000 [12:59:01<12:46:43, 93.12s/it]
Generating adversarial examples:  51%|█████     | 507/1000 [13:00:31<12:38:13, 92.28s/it]
Generating adversarial examples:  51%|█████     | 508/1000 [13:00:31<8:50:17, 64.67s/it] 
Generating adversarial examples:  51%|█████     | 509/1000 [13:02:53<11:59:04, 87.87s/it]
Generating adversarial examples:  51%|█████     | 510/1000 [13:02:54<8:22:55, 61.58s/it] 
Generating adversarial examples:  51%|█████     | 511/1000 [13:03:54<8:20:04, 61.36s/it]
Generating adversarial examples:  51%|█████     | 512/1000 [13:03:55<5:49:56, 43.03s/it]
Generating adversarial examples:  51%|█████▏    | 513/1000 [13:05:21<7:34:28, 55.99s/it]
Generating adversarial examples:  51%|█████▏    | 514/1000 [13:08:33<13:03:47, 96.76s/it]
Generating adversarial examples:  52%|█████▏    | 515/1000 [13:08:33<9:08:07, 67.81s/it] 
Generating adversarial examples:  52%|█████▏    | 516/1000 [13:08:33<6:23:29, 47.54s/it]
Generating adversarial examples:  52%|█████▏    | 517/1000 [13:09:36<6:58:51, 52.03s/it]
Generating adversarial examples:  52%|█████▏    | 518/1000 [13:10:37<7:19:39, 54.73s/it]
Generating adversarial examples:  52%|█████▏    | 519/1000 [13:10:37<5:07:43, 38.39s/it]
Generating adversarial examples:  52%|█████▏    | 520/1000 [13:10:37<3:35:32, 26.94s/it]
Generating adversarial examples:  52%|█████▏    | 521/1000 [13:12:59<8:08:44, 61.22s/it]
Generating adversarial examples:  52%|█████▏    | 522/1000 [13:14:37<9:35:43, 72.27s/it]
Generating adversarial examples:  52%|█████▏    | 523/1000 [13:14:37<6:42:45, 50.66s/it]
Generating adversarial examples:  52%|█████▏    | 524/1000 [13:14:37<4:41:55, 35.54s/it]
Generating adversarial examples:  52%|█████▎    | 525/1000 [13:32:17<45:14:11, 342.85s/it]
Generating adversarial examples:  53%|█████▎    | 526/1000 [13:32:17<31:36:31, 240.07s/it]
Generating adversarial examples:  53%|█████▎    | 527/1000 [13:32:17<22:05:21, 168.12s/it]
Generating adversarial examples:  53%|█████▎    | 528/1000 [13:33:36<18:31:42, 141.32s/it]
Generating adversarial examples:  53%|█████▎    | 529/1000 [13:33:36<12:57:07, 99.00s/it] 
Generating adversarial examples:  53%|█████▎    | 530/1000 [13:35:00<12:20:06, 94.48s/it]
Generating adversarial examples:  53%|█████▎    | 531/1000 [13:35:01<8:37:33, 66.21s/it] 
Generating adversarial examples:  53%|█████▎    | 532/1000 [13:35:01<6:02:05, 46.42s/it]
Generating adversarial examples:  53%|█████▎    | 533/1000 [13:35:01<4:13:30, 32.57s/it]
Generating adversarial examples:  53%|█████▎    | 534/1000 [13:36:55<7:22:17, 56.95s/it]
Generating adversarial examples:  54%|█████▎    | 535/1000 [13:36:55<5:09:30, 39.94s/it]
Generating adversarial examples:  54%|█████▎    | 536/1000 [13:38:16<6:42:31, 52.05s/it]
Generating adversarial examples:  54%|█████▎    | 537/1000 [13:38:16<4:41:43, 36.51s/it]
Generating adversarial examples:  54%|█████▍    | 538/1000 [13:39:44<6:40:42, 52.04s/it]
Generating adversarial examples:  54%|█████▍    | 539/1000 [13:39:44<4:40:27, 36.50s/it]
Generating adversarial examples:  54%|█████▍    | 540/1000 [13:42:18<9:10:21, 71.79s/it]
Generating adversarial examples:  54%|█████▍    | 541/1000 [13:42:19<6:24:58, 50.32s/it]
Generating adversarial examples:  54%|█████▍    | 542/1000 [13:44:46<10:05:20, 79.30s/it]
Generating adversarial examples:  54%|█████▍    | 543/1000 [13:45:45<9:17:49, 73.24s/it] 
Generating adversarial examples:  54%|█████▍    | 544/1000 [13:46:43<8:41:30, 68.62s/it]
Generating adversarial examples:  55%|█████▍    | 545/1000 [13:49:52<13:15:48, 104.94s/it]
Generating adversarial examples:  55%|█████▍    | 546/1000 [13:52:38<15:33:00, 123.30s/it]
Generating adversarial examples:  55%|█████▍    | 547/1000 [13:53:46<13:25:29, 106.69s/it]
Generating adversarial examples:  55%|█████▍    | 548/1000 [13:54:56<12:00:27, 95.64s/it] 
Generating adversarial examples:  55%|█████▍    | 549/1000 [13:58:09<15:37:01, 124.66s/it]
Generating adversarial examples:  55%|█████▌    | 550/1000 [13:59:20<13:35:44, 108.77s/it]
Generating adversarial examples:  55%|█████▌    | 551/1000 [14:00:16<11:33:58, 92.74s/it] 
Generating adversarial examples:  55%|█████▌    | 552/1000 [14:01:39<11:12:25, 90.06s/it]
Generating adversarial examples:  55%|█████▌    | 553/1000 [14:01:40<7:50:11, 63.11s/it] 
Generating adversarial examples:  55%|█████▌    | 554/1000 [14:02:47<7:58:40, 64.40s/it]
Generating adversarial examples:  56%|█████▌    | 555/1000 [14:03:44<7:41:17, 62.20s/it]
Generating adversarial examples:  56%|█████▌    | 556/1000 [14:03:44<5:22:44, 43.61s/it]
Generating adversarial examples:  56%|█████▌    | 557/1000 [14:03:45<3:45:57, 30.60s/it]
Generating adversarial examples:  56%|█████▌    | 558/1000 [14:05:11<5:49:28, 47.44s/it]
Generating adversarial examples:  56%|█████▌    | 559/1000 [14:05:12<4:04:37, 33.28s/it]
Generating adversarial examples:  56%|█████▌    | 560/1000 [14:05:12<2:51:23, 23.37s/it]
Generating adversarial examples:  56%|█████▌    | 561/1000 [14:06:34<4:59:18, 40.91s/it]
Generating adversarial examples:  56%|█████▌    | 562/1000 [14:06:34<3:29:34, 28.71s/it]
Generating adversarial examples:  56%|█████▋    | 563/1000 [14:07:32<4:32:56, 37.47s/it]
Generating adversarial examples:  56%|█████▋    | 564/1000 [14:08:36<5:30:10, 45.44s/it]
Generating adversarial examples:  56%|█████▋    | 565/1000 [14:10:18<7:33:15, 62.52s/it]
Generating adversarial examples:  57%|█████▋    | 566/1000 [14:10:18<5:17:04, 43.84s/it]
Generating adversarial examples:  57%|█████▋    | 567/1000 [14:10:19<3:41:58, 30.76s/it]
Generating adversarial examples:  57%|█████▋    | 568/1000 [14:11:35<5:19:58, 44.44s/it]
Generating adversarial examples:  57%|█████▋    | 569/1000 [14:12:52<6:29:29, 54.22s/it]
Generating adversarial examples:  57%|█████▋    | 570/1000 [14:12:52<4:32:32, 38.03s/it]
Generating adversarial examples:  57%|█████▋    | 571/1000 [14:12:53<3:10:51, 26.69s/it]
Generating adversarial examples:  57%|█████▋    | 572/1000 [14:16:19<9:35:45, 80.71s/it]
Generating adversarial examples:  57%|█████▋    | 573/1000 [14:16:20<6:42:37, 56.57s/it]
Generating adversarial examples:  57%|█████▋    | 574/1000 [14:17:42<7:36:56, 64.36s/it]
Generating adversarial examples:  57%|█████▊    | 575/1000 [14:17:42<5:19:38, 45.12s/it]
Generating adversarial examples:  58%|█████▊    | 576/1000 [14:35:54<42:16:55, 359.00s/it]
Generating adversarial examples:  58%|█████▊    | 577/1000 [14:37:27<32:49:18, 279.34s/it]
Generating adversarial examples:  58%|█████▊    | 578/1000 [14:41:07<30:39:53, 261.60s/it]
Generating adversarial examples:  58%|█████▊    | 579/1000 [14:41:08<21:25:23, 183.19s/it]
Generating adversarial examples:  58%|█████▊    | 580/1000 [14:44:11<21:23:17, 183.33s/it]
Generating adversarial examples:  58%|█████▊    | 581/1000 [14:44:12<14:56:41, 128.40s/it]
Generating adversarial examples:  58%|█████▊    | 582/1000 [14:47:44<17:49:52, 153.57s/it]
Generating adversarial examples:  58%|█████▊    | 583/1000 [14:49:54<16:58:48, 146.59s/it]
Generating adversarial examples:  58%|█████▊    | 584/1000 [14:49:54<11:51:58, 102.69s/it]
Generating adversarial examples:  58%|█████▊    | 585/1000 [14:51:02<10:37:12, 92.13s/it] 
Generating adversarial examples:  59%|█████▊    | 586/1000 [14:53:03<11:35:34, 100.81s/it]
Generating adversarial examples:  59%|█████▊    | 587/1000 [14:54:32<11:10:38, 97.43s/it] 
Generating adversarial examples:  59%|█████▉    | 588/1000 [14:55:32<9:50:13, 85.96s/it] 
Generating adversarial examples:  59%|█████▉    | 589/1000 [14:56:53<9:39:54, 84.66s/it]
Generating adversarial examples:  59%|█████▉    | 590/1000 [14:56:54<6:45:27, 59.33s/it]
Generating adversarial examples:  59%|█████▉    | 591/1000 [14:56:54<4:43:37, 41.61s/it]
Generating adversarial examples:  59%|█████▉    | 592/1000 [14:57:53<5:18:17, 46.81s/it]
Generating adversarial examples:  59%|█████▉    | 593/1000 [15:00:07<8:15:52, 73.10s/it]
Generating adversarial examples:  59%|█████▉    | 594/1000 [15:00:07<5:46:45, 51.25s/it]
Generating adversarial examples:  60%|█████▉    | 595/1000 [15:00:08<4:02:38, 35.95s/it]
Generating adversarial examples:  60%|█████▉    | 596/1000 [15:01:20<5:16:22, 46.99s/it]
Generating adversarial examples:  60%|█████▉    | 597/1000 [15:02:18<5:37:38, 50.27s/it]
Generating adversarial examples:  60%|█████▉    | 598/1000 [15:03:19<5:56:55, 53.27s/it]
Generating adversarial examples:  60%|█████▉    | 599/1000 [15:04:17<6:07:17, 54.96s/it]
Generating adversarial examples:  60%|██████    | 600/1000 [15:05:22<6:25:46, 57.87s/it]
Generating adversarial examples:  60%|██████    | 601/1000 [15:06:32<6:49:16, 61.54s/it]
Generating adversarial examples:  60%|██████    | 602/1000 [15:07:40<7:00:06, 63.33s/it]
Generating adversarial examples:  60%|██████    | 603/1000 [15:09:01<7:34:12, 68.65s/it]
Generating adversarial examples:  60%|██████    | 604/1000 [15:09:01<5:17:38, 48.13s/it]
Generating adversarial examples:  60%|██████    | 605/1000 [15:09:01<3:42:16, 33.76s/it]
Generating adversarial examples:  61%|██████    | 606/1000 [15:10:11<4:52:03, 44.48s/it]
Generating adversarial examples:  61%|██████    | 607/1000 [15:11:14<5:27:52, 50.06s/it]
Generating adversarial examples:  61%|██████    | 608/1000 [15:11:14<3:49:24, 35.11s/it]
Generating adversarial examples:  61%|██████    | 609/1000 [15:11:14<2:40:39, 24.65s/it]
Generating adversarial examples:  61%|██████    | 610/1000 [15:12:40<4:38:46, 42.89s/it]
Generating adversarial examples:  61%|██████    | 611/1000 [15:12:40<3:15:07, 30.10s/it]
Generating adversarial examples:  61%|██████    | 612/1000 [15:14:35<5:59:03, 55.52s/it]
Generating adversarial examples:  61%|██████▏   | 613/1000 [15:14:35<4:11:09, 38.94s/it]
Generating adversarial examples:  61%|██████▏   | 614/1000 [15:15:48<5:15:46, 49.09s/it]
Generating adversarial examples:  62%|██████▏   | 615/1000 [15:15:48<3:40:56, 34.43s/it]
Generating adversarial examples:  62%|██████▏   | 616/1000 [15:15:48<2:34:44, 24.18s/it]
Generating adversarial examples:  62%|██████▏   | 617/1000 [15:15:49<1:48:30, 17.00s/it]
Generating adversarial examples:  62%|██████▏   | 618/1000 [15:15:49<1:16:13, 11.97s/it]
Generating adversarial examples:  62%|██████▏   | 619/1000 [15:15:49<53:40,  8.45s/it]  
Generating adversarial examples:  62%|██████▏   | 620/1000 [15:15:49<37:56,  5.99s/it]
Generating adversarial examples:  62%|██████▏   | 621/1000 [15:18:22<5:15:49, 50.00s/it]
Generating adversarial examples:  62%|██████▏   | 622/1000 [15:18:22<3:40:57, 35.07s/it]
Generating adversarial examples:  62%|██████▏   | 623/1000 [15:20:34<6:42:12, 64.01s/it]
Generating adversarial examples:  62%|██████▏   | 624/1000 [15:38:18<38:01:06, 364.01s/it]
Generating adversarial examples:  62%|██████▎   | 625/1000 [15:39:19<28:26:40, 273.07s/it]
Generating adversarial examples:  63%|██████▎   | 626/1000 [15:39:19<19:51:56, 191.22s/it]
Generating adversarial examples:  63%|██████▎   | 627/1000 [15:39:19<13:52:35, 133.93s/it]
Generating adversarial examples:  63%|██████▎   | 628/1000 [15:40:58<12:45:05, 123.40s/it]
Generating adversarial examples:  63%|██████▎   | 629/1000 [15:41:58<10:46:15, 104.52s/it]
Generating adversarial examples:  63%|██████▎   | 630/1000 [15:41:59<7:31:36, 73.23s/it]  
Generating adversarial examples:  63%|██████▎   | 631/1000 [15:41:59<5:15:43, 51.34s/it]
Generating adversarial examples:  63%|██████▎   | 632/1000 [15:43:03<5:37:22, 55.01s/it]
Generating adversarial examples:  63%|██████▎   | 633/1000 [15:43:03<3:55:58, 38.58s/it]
Generating adversarial examples:  63%|██████▎   | 634/1000 [15:43:03<2:45:11, 27.08s/it]
Generating adversarial examples:  64%|██████▎   | 635/1000 [15:53:04<20:12:34, 199.33s/it]
Generating adversarial examples:  64%|██████▎   | 636/1000 [15:53:05<14:06:55, 139.60s/it]
Generating adversarial examples:  64%|██████▎   | 637/1000 [15:55:51<14:53:56, 147.76s/it]
Generating adversarial examples:  64%|██████▍   | 638/1000 [15:57:48<13:55:46, 138.53s/it]
Generating adversarial examples:  64%|██████▍   | 639/1000 [15:57:49<9:43:52, 97.04s/it]  
Generating adversarial examples:  64%|██████▍   | 640/1000 [15:57:49<6:48:01, 68.00s/it]
Generating adversarial examples:  64%|██████▍   | 641/1000 [15:59:43<8:09:19, 81.78s/it]
Generating adversarial examples:  64%|██████▍   | 642/1000 [16:00:48<7:38:13, 76.80s/it]
Generating adversarial examples:  64%|██████▍   | 643/1000 [16:00:48<5:20:18, 53.83s/it]
Generating adversarial examples:  64%|██████▍   | 644/1000 [16:02:46<7:14:01, 73.15s/it]
Generating adversarial examples:  64%|██████▍   | 645/1000 [16:04:04<7:21:08, 74.56s/it]
Generating adversarial examples:  65%|██████▍   | 646/1000 [16:05:04<6:53:22, 70.06s/it]
Generating adversarial examples:  65%|██████▍   | 647/1000 [16:05:04<4:48:58, 49.12s/it]
Generating adversarial examples:  65%|██████▍   | 648/1000 [16:08:16<8:59:08, 91.90s/it]
Generating adversarial examples:  65%|██████▍   | 649/1000 [16:08:16<6:16:45, 64.40s/it]
Generating adversarial examples:  65%|██████▌   | 650/1000 [16:08:16<4:23:24, 45.16s/it]
Generating adversarial examples:  65%|██████▌   | 651/1000 [16:11:43<9:04:08, 93.55s/it]
Generating adversarial examples:  65%|██████▌   | 652/1000 [16:12:44<8:05:41, 83.74s/it]
Generating adversarial examples:  65%|██████▌   | 653/1000 [16:12:44<5:39:25, 58.69s/it]
Generating adversarial examples:  65%|██████▌   | 654/1000 [16:12:44<3:57:20, 41.16s/it]
Generating adversarial examples:  66%|██████▌   | 655/1000 [16:13:43<4:26:55, 46.42s/it]
Generating adversarial examples:  66%|██████▌   | 656/1000 [16:14:46<4:54:54, 51.44s/it]
Generating adversarial examples:  66%|██████▌   | 657/1000 [16:14:46<3:26:15, 36.08s/it]
Generating adversarial examples:  66%|██████▌   | 658/1000 [16:17:37<7:16:29, 76.58s/it]
Generating adversarial examples:  66%|██████▌   | 659/1000 [16:18:48<7:04:39, 74.72s/it]
Generating adversarial examples:  66%|██████▌   | 660/1000 [16:21:04<8:47:24, 93.07s/it]
Generating adversarial examples:  66%|██████▌   | 661/1000 [16:21:04<6:08:31, 65.23s/it]
Generating adversarial examples:  66%|██████▌   | 662/1000 [16:23:48<8:54:12, 94.83s/it]
Generating adversarial examples:  66%|██████▋   | 663/1000 [16:24:45<7:50:01, 83.68s/it]
Generating adversarial examples:  66%|██████▋   | 664/1000 [16:26:03<7:37:53, 81.77s/it]
Generating adversarial examples:  66%|██████▋   | 665/1000 [16:27:34<7:53:12, 84.75s/it]
Generating adversarial examples:  67%|██████▋   | 666/1000 [16:28:37<7:14:35, 78.07s/it]
Generating adversarial examples:  67%|██████▋   | 667/1000 [16:29:38<6:45:00, 72.97s/it]
Generating adversarial examples:  67%|██████▋   | 668/1000 [16:29:38<4:43:03, 51.16s/it]
Generating adversarial examples:  67%|██████▋   | 669/1000 [16:31:44<6:46:23, 73.67s/it]
Generating adversarial examples:  67%|██████▋   | 670/1000 [16:33:50<8:10:52, 89.25s/it]
Generating adversarial examples:  67%|██████▋   | 671/1000 [16:33:50<5:42:58, 62.55s/it]
Generating adversarial examples:  67%|██████▋   | 672/1000 [16:33:50<3:59:45, 43.86s/it]
Generating adversarial examples:  67%|██████▋   | 673/1000 [16:33:51<2:47:43, 30.78s/it]
Generating adversarial examples:  67%|██████▋   | 674/1000 [16:36:19<5:59:23, 66.15s/it]
Generating adversarial examples:  68%|██████▊   | 675/1000 [16:37:20<5:49:43, 64.56s/it]
Generating adversarial examples:  68%|██████▊   | 676/1000 [16:38:18<5:37:26, 62.49s/it]
Generating adversarial examples:  68%|██████▊   | 677/1000 [16:53:17<28:07:21, 313.44s/it]
Generating adversarial examples:  68%|██████▊   | 678/1000 [16:55:14<22:45:26, 254.43s/it]
Generating adversarial examples:  68%|██████▊   | 679/1000 [16:57:20<19:15:48, 216.04s/it]
Generating adversarial examples:  68%|██████▊   | 680/1000 [16:58:31<15:20:22, 172.57s/it]
Generating adversarial examples:  68%|██████▊   | 681/1000 [16:59:31<12:17:22, 138.69s/it]
Generating adversarial examples:  68%|██████▊   | 682/1000 [17:01:17<11:23:52, 129.03s/it]
Generating adversarial examples:  68%|██████▊   | 683/1000 [17:02:38<10:04:46, 114.47s/it]
Generating adversarial examples:  68%|██████▊   | 684/1000 [17:05:40<11:49:12, 134.66s/it]
Generating adversarial examples:  68%|██████▊   | 685/1000 [17:08:55<13:22:04, 152.78s/it]
Generating adversarial examples:  69%|██████▊   | 686/1000 [17:10:30<11:49:35, 135.59s/it]
Generating adversarial examples:  69%|██████▊   | 687/1000 [17:12:54<12:00:37, 138.14s/it]
Generating adversarial examples:  69%|██████▉   | 688/1000 [17:12:55<8:23:12, 96.77s/it]  
Generating adversarial examples:  69%|██████▉   | 689/1000 [17:14:15<7:57:01, 92.03s/it]
Generating adversarial examples:  69%|██████▉   | 690/1000 [17:15:37<7:38:37, 88.77s/it]
Generating adversarial examples:  69%|██████▉   | 691/1000 [17:16:43<7:02:02, 81.95s/it]
Generating adversarial examples:  69%|██████▉   | 692/1000 [17:18:37<7:51:08, 91.78s/it]
Generating adversarial examples:  69%|██████▉   | 693/1000 [17:19:53<7:24:09, 86.81s/it]
Generating adversarial examples:  69%|██████▉   | 694/1000 [17:20:56<6:47:25, 79.89s/it]
Generating adversarial examples:  70%|██████▉   | 695/1000 [17:21:50<6:06:45, 72.15s/it]
Generating adversarial examples:  70%|██████▉   | 696/1000 [17:22:50<5:45:48, 68.25s/it]
Generating adversarial examples:  70%|██████▉   | 697/1000 [17:25:40<8:19:25, 98.90s/it]
Generating adversarial examples:  70%|██████▉   | 698/1000 [17:27:11<8:05:36, 96.48s/it]
Generating adversarial examples:  70%|██████▉   | 699/1000 [17:28:35<7:45:19, 92.76s/it]
Generating adversarial examples:  70%|███████   | 700/1000 [17:28:35<5:25:00, 65.00s/it]
Generating adversarial examples:  70%|███████   | 701/1000 [17:29:45<5:31:49, 66.59s/it]
Generating adversarial examples:  70%|███████   | 702/1000 [17:33:15<9:04:27, 109.62s/it]
Generating adversarial examples:  70%|███████   | 703/1000 [17:34:22<7:58:26, 96.66s/it] 
Generating adversarial examples:  70%|███████   | 704/1000 [17:34:22<5:34:08, 67.73s/it]
Generating adversarial examples:  70%|███████   | 705/1000 [17:34:22<3:53:28, 47.49s/it]
Generating adversarial examples:  71%|███████   | 706/1000 [17:37:29<7:16:58, 89.18s/it]
Generating adversarial examples:  71%|███████   | 707/1000 [17:54:54<30:35:40, 375.90s/it]
Generating adversarial examples:  71%|███████   | 708/1000 [17:54:54<21:20:56, 263.21s/it]
Generating adversarial examples:  71%|███████   | 709/1000 [17:56:51<17:44:09, 219.41s/it]
Generating adversarial examples:  71%|███████   | 710/1000 [17:58:54<15:20:19, 190.41s/it]
Generating adversarial examples:  71%|███████   | 711/1000 [17:58:54<10:42:22, 133.36s/it]
Generating adversarial examples:  71%|███████   | 712/1000 [17:59:57<8:58:12, 112.13s/it] 
Generating adversarial examples:  71%|███████▏  | 713/1000 [18:02:45<10:17:09, 129.02s/it]
Generating adversarial examples:  71%|███████▏  | 714/1000 [18:02:45<7:10:51, 90.39s/it]  
Generating adversarial examples:  72%|███████▏  | 715/1000 [18:02:46<5:00:53, 63.35s/it]
Generating adversarial examples:  72%|███████▏  | 716/1000 [18:02:46<3:30:14, 44.42s/it]
Generating adversarial examples:  72%|███████▏  | 717/1000 [18:02:46<2:26:59, 31.17s/it]
Generating adversarial examples:  72%|███████▏  | 718/1000 [18:05:18<5:16:42, 67.38s/it]
Generating adversarial examples:  72%|███████▏  | 719/1000 [18:05:18<3:41:15, 47.24s/it]
Generating adversarial examples:  72%|███████▏  | 720/1000 [18:05:19<2:34:40, 33.14s/it]
Generating adversarial examples:  72%|███████▏  | 721/1000 [18:05:19<1:48:13, 23.27s/it]
Generating adversarial examples:  72%|███████▏  | 722/1000 [18:05:19<1:15:49, 16.37s/it]
Generating adversarial examples:  72%|███████▏  | 723/1000 [18:05:19<53:13, 11.53s/it]  
Generating adversarial examples:  72%|███████▏  | 724/1000 [18:06:17<1:57:19, 25.50s/it]
Generating adversarial examples:  72%|███████▎  | 725/1000 [18:07:18<2:45:16, 36.06s/it]
Generating adversarial examples:  73%|███████▎  | 726/1000 [18:07:18<1:55:36, 25.31s/it]
Generating adversarial examples:  73%|███████▎  | 727/1000 [18:08:23<2:48:18, 36.99s/it]
Generating adversarial examples:  73%|███████▎  | 728/1000 [18:11:12<5:48:16, 76.83s/it]
Generating adversarial examples:  73%|███████▎  | 729/1000 [18:12:19<5:33:13, 73.78s/it]
Generating adversarial examples:  73%|███████▎  | 730/1000 [18:12:19<3:52:44, 51.72s/it]
Generating adversarial examples:  73%|███████▎  | 731/1000 [18:12:20<2:42:39, 36.28s/it]
Generating adversarial examples:  73%|███████▎  | 732/1000 [18:13:50<3:54:58, 52.61s/it]
Generating adversarial examples:  73%|███████▎  | 733/1000 [18:19:44<10:35:29, 142.81s/it]
Generating adversarial examples:  73%|███████▎  | 734/1000 [18:21:02<9:07:12, 123.43s/it] 
Generating adversarial examples:  74%|███████▎  | 735/1000 [18:22:15<7:58:36, 108.36s/it]
Generating adversarial examples:  74%|███████▎  | 736/1000 [18:24:04<7:57:09, 108.45s/it]
Generating adversarial examples:  74%|███████▎  | 737/1000 [18:25:03<6:51:13, 93.81s/it] 
Generating adversarial examples:  74%|███████▍  | 738/1000 [18:25:04<4:47:04, 65.74s/it]
Generating adversarial examples:  74%|███████▍  | 739/1000 [18:26:14<4:51:44, 67.07s/it]
Generating adversarial examples:  74%|███████▍  | 740/1000 [18:26:14<3:23:45, 47.02s/it]
Generating adversarial examples:  74%|███████▍  | 741/1000 [18:28:45<5:37:40, 78.22s/it]
Generating adversarial examples:  74%|███████▍  | 742/1000 [18:29:49<5:18:15, 74.02s/it]
Generating adversarial examples:  74%|███████▍  | 743/1000 [18:31:18<5:35:48, 78.40s/it]
Generating adversarial examples:  74%|███████▍  | 744/1000 [18:31:18<3:54:27, 54.95s/it]
Generating adversarial examples:  74%|███████▍  | 745/1000 [18:32:19<4:00:56, 56.69s/it]
Generating adversarial examples:  75%|███████▍  | 746/1000 [18:33:48<4:41:25, 66.48s/it]
Generating adversarial examples:  75%|███████▍  | 747/1000 [18:33:48<3:16:32, 46.61s/it]
Generating adversarial examples:  75%|███████▍  | 748/1000 [18:33:49<2:17:20, 32.70s/it]
Generating adversarial examples:  75%|███████▍  | 749/1000 [18:34:50<2:52:42, 41.28s/it]
Generating adversarial examples:  75%|███████▌  | 750/1000 [18:38:22<6:25:32, 92.53s/it]
Generating adversarial examples:  75%|███████▌  | 751/1000 [18:38:22<4:29:06, 64.85s/it]
Generating adversarial examples:  75%|███████▌  | 752/1000 [18:38:22<3:07:55, 45.47s/it]
Generating adversarial examples:  75%|███████▌  | 753/1000 [18:39:22<3:24:24, 49.65s/it]
Generating adversarial examples:  75%|███████▌  | 754/1000 [18:39:22<2:22:48, 34.83s/it]
Generating adversarial examples:  76%|███████▌  | 755/1000 [18:39:22<1:39:51, 24.46s/it]
Generating adversarial examples:  76%|███████▌  | 756/1000 [18:40:31<2:32:48, 37.57s/it]
Generating adversarial examples:  76%|███████▌  | 757/1000 [18:40:31<1:46:49, 26.38s/it]
Generating adversarial examples:  76%|███████▌  | 758/1000 [18:40:31<1:14:45, 18.54s/it]
Generating adversarial examples:  76%|███████▌  | 759/1000 [18:40:31<52:25, 13.05s/it]  
Generating adversarial examples:  76%|███████▌  | 760/1000 [18:40:32<36:50,  9.21s/it]
Generating adversarial examples:  76%|███████▌  | 761/1000 [18:41:34<1:40:07, 25.14s/it]
Generating adversarial examples:  76%|███████▌  | 762/1000 [18:42:34<2:21:51, 35.76s/it]
Generating adversarial examples:  76%|███████▋  | 763/1000 [18:43:47<3:05:17, 46.91s/it]
Generating adversarial examples:  76%|███████▋  | 764/1000 [18:48:07<7:15:01, 110.60s/it]
Generating adversarial examples:  76%|███████▋  | 765/1000 [18:50:55<8:20:51, 127.88s/it]
Generating adversarial examples:  77%|███████▋  | 766/1000 [18:50:55<5:49:23, 89.59s/it] 
Generating adversarial examples:  77%|███████▋  | 767/1000 [18:52:42<6:07:49, 94.72s/it]
Generating adversarial examples:  77%|███████▋  | 768/1000 [18:54:30<6:21:26, 98.65s/it]
Generating adversarial examples:  77%|███████▋  | 769/1000 [18:57:28<7:52:24, 122.70s/it]
Generating adversarial examples:  77%|███████▋  | 770/1000 [18:59:39<7:59:56, 125.20s/it]
Generating adversarial examples:  77%|███████▋  | 771/1000 [18:59:40<5:34:46, 87.72s/it] 
Generating adversarial examples:  77%|███████▋  | 772/1000 [19:00:46<5:08:41, 81.24s/it]
Generating adversarial examples:  77%|███████▋  | 773/1000 [19:03:15<6:24:03, 101.51s/it]
Generating adversarial examples:  77%|███████▋  | 774/1000 [19:05:06<6:33:51, 104.56s/it]
Generating adversarial examples:  78%|███████▊  | 775/1000 [19:06:13<5:49:06, 93.09s/it] 
Generating adversarial examples:  78%|███████▊  | 776/1000 [19:07:15<5:13:37, 84.01s/it]
Generating adversarial examples:  78%|███████▊  | 777/1000 [19:08:49<5:23:25, 87.02s/it]
Generating adversarial examples:  78%|███████▊  | 778/1000 [19:08:50<3:45:39, 60.99s/it]
Generating adversarial examples:  78%|███████▊  | 779/1000 [19:08:50<2:37:31, 42.77s/it]
Generating adversarial examples:  78%|███████▊  | 780/1000 [19:10:10<3:17:27, 53.85s/it]
Generating adversarial examples:  78%|███████▊  | 781/1000 [19:11:09<3:22:33, 55.50s/it]
Generating adversarial examples:  78%|███████▊  | 782/1000 [19:14:07<5:34:40, 92.11s/it]
Generating adversarial examples:  78%|███████▊  | 783/1000 [19:14:07<3:53:27, 64.55s/it]
Generating adversarial examples:  78%|███████▊  | 784/1000 [19:31:15<21:13:21, 353.71s/it]
Generating adversarial examples:  78%|███████▊  | 785/1000 [19:31:15<14:47:29, 247.67s/it]
Generating adversarial examples:  79%|███████▊  | 786/1000 [19:32:54<12:03:44, 202.92s/it]
Generating adversarial examples:  79%|███████▊  | 787/1000 [19:34:45<10:22:44, 175.42s/it]
Generating adversarial examples:  79%|███████▉  | 788/1000 [19:34:45<7:14:08, 122.87s/it] 
Generating adversarial examples:  79%|███████▉  | 789/1000 [19:35:50<6:11:02, 105.51s/it]
Generating adversarial examples:  79%|███████▉  | 790/1000 [19:36:54<5:25:30, 93.00s/it] 
Generating adversarial examples:  79%|███████▉  | 791/1000 [19:38:53<5:50:44, 100.69s/it]
Generating adversarial examples:  79%|███████▉  | 792/1000 [19:38:53<4:04:35, 70.56s/it] 
Generating adversarial examples:  79%|███████▉  | 793/1000 [19:40:03<4:02:59, 70.43s/it]
Generating adversarial examples:  79%|███████▉  | 794/1000 [19:40:04<2:49:31, 49.38s/it]
Generating adversarial examples:  80%|███████▉  | 795/1000 [19:46:18<8:22:23, 147.04s/it]
Generating adversarial examples:  80%|███████▉  | 796/1000 [19:49:10<8:44:53, 154.38s/it]
Generating adversarial examples:  80%|███████▉  | 797/1000 [19:51:53<8:50:47, 156.88s/it]
Generating adversarial examples:  80%|███████▉  | 798/1000 [19:52:55<7:12:09, 128.36s/it]
Generating adversarial examples:  80%|███████▉  | 799/1000 [19:57:40<9:47:56, 175.51s/it]
Generating adversarial examples:  80%|████████  | 800/1000 [20:04:52<14:01:48, 252.54s/it]
Generating adversarial examples:  80%|████████  | 801/1000 [20:06:54<11:47:35, 213.34s/it]
Generating adversarial examples:  80%|████████  | 802/1000 [20:07:53<9:11:10, 167.03s/it] 
Generating adversarial examples:  80%|████████  | 803/1000 [20:12:38<11:04:26, 202.37s/it]
Generating adversarial examples:  80%|████████  | 804/1000 [20:13:46<8:49:44, 162.16s/it] 
Generating adversarial examples:  80%|████████  | 805/1000 [20:14:50<7:10:47, 132.55s/it]
Generating adversarial examples:  81%|████████  | 806/1000 [20:15:53<6:01:03, 111.67s/it]
Generating adversarial examples:  81%|████████  | 807/1000 [20:16:52<5:09:00, 96.06s/it] 
Generating adversarial examples:  81%|████████  | 808/1000 [20:18:05<4:45:00, 89.06s/it]
Generating adversarial examples:  81%|████████  | 809/1000 [20:19:48<4:56:59, 93.30s/it]
Generating adversarial examples:  81%|████████  | 810/1000 [20:37:16<20:02:12, 379.64s/it]
Generating adversarial examples:  81%|████████  | 811/1000 [20:37:16<13:57:20, 265.82s/it]
Generating adversarial examples:  81%|████████  | 812/1000 [20:38:34<10:56:13, 209.43s/it]
Generating adversarial examples:  81%|████████▏ | 813/1000 [20:40:34<9:29:09, 182.62s/it] 
Generating adversarial examples:  81%|████████▏ | 814/1000 [20:40:34<6:36:30, 127.91s/it]
Generating adversarial examples:  82%|████████▏ | 815/1000 [20:43:35<7:23:10, 143.74s/it]
Generating adversarial examples:  82%|████████▏ | 816/1000 [20:44:50<6:17:07, 122.98s/it]
Generating adversarial examples:  82%|████████▏ | 817/1000 [20:48:41<7:53:49, 155.35s/it]
Generating adversarial examples:  82%|████████▏ | 818/1000 [20:50:34<7:12:52, 142.71s/it]
Generating adversarial examples:  82%|████████▏ | 819/1000 [21:06:24<19:21:23, 384.99s/it]
Generating adversarial examples:  82%|████████▏ | 820/1000 [21:06:24<13:28:42, 269.57s/it]
Generating adversarial examples:  82%|████████▏ | 821/1000 [21:06:25<9:23:10, 188.77s/it] 
Generating adversarial examples:  82%|████████▏ | 822/1000 [21:06:25<6:32:14, 132.21s/it]
Generating adversarial examples:  82%|████████▏ | 823/1000 [21:06:25<4:33:14, 92.62s/it] 
Generating adversarial examples:  82%|████████▏ | 824/1000 [21:07:49<4:24:24, 90.14s/it]
Generating adversarial examples:  82%|████████▎ | 825/1000 [21:10:18<5:13:45, 107.58s/it]
Generating adversarial examples:  83%|████████▎ | 826/1000 [21:10:18<3:38:35, 75.38s/it] 
Generating adversarial examples:  83%|████████▎ | 827/1000 [21:10:18<2:32:21, 52.84s/it]
Generating adversarial examples:  83%|████████▎ | 828/1000 [21:12:11<3:23:12, 70.89s/it]
Generating adversarial examples:  83%|████████▎ | 829/1000 [21:12:11<2:21:37, 49.69s/it]
Generating adversarial examples:  83%|████████▎ | 830/1000 [21:14:42<3:46:26, 79.92s/it]
Generating adversarial examples:  83%|████████▎ | 831/1000 [21:15:53<3:37:48, 77.33s/it]
Generating adversarial examples:  83%|████████▎ | 832/1000 [21:17:48<4:08:10, 88.64s/it]
Generating adversarial examples:  83%|████████▎ | 833/1000 [21:17:48<2:52:54, 62.12s/it]
Generating adversarial examples:  83%|████████▎ | 834/1000 [21:17:49<2:00:30, 43.56s/it]
Generating adversarial examples:  84%|████████▎ | 835/1000 [21:19:00<2:22:52, 51.95s/it]
Generating adversarial examples:  84%|████████▎ | 836/1000 [21:35:12<14:56:06, 327.84s/it]
Generating adversarial examples:  84%|████████▎ | 837/1000 [21:36:22<11:20:32, 250.51s/it]
Generating adversarial examples:  84%|████████▍ | 838/1000 [21:38:07<9:18:42, 206.93s/it] 
Generating adversarial examples:  84%|████████▍ | 839/1000 [21:39:09<7:18:33, 163.44s/it]
Generating adversarial examples:  84%|████████▍ | 840/1000 [21:39:09<5:05:16, 114.48s/it]
Generating adversarial examples:  84%|████████▍ | 841/1000 [21:41:27<5:21:54, 121.48s/it]
Generating adversarial examples:  84%|████████▍ | 842/1000 [21:42:35<4:37:26, 105.36s/it]
Generating adversarial examples:  84%|████████▍ | 843/1000 [21:42:35<3:13:10, 73.82s/it] 
Generating adversarial examples:  84%|████████▍ | 844/1000 [21:44:23<3:38:47, 84.15s/it]
Generating adversarial examples:  84%|████████▍ | 845/1000 [21:47:46<5:09:16, 119.72s/it]
Generating adversarial examples:  85%|████████▍ | 846/1000 [21:47:46<3:35:17, 83.88s/it] 
Generating adversarial examples:  85%|████████▍ | 847/1000 [21:51:29<5:20:11, 125.57s/it]
Generating adversarial examples:  85%|████████▍ | 848/1000 [21:51:29<3:42:51, 87.97s/it] 
Generating adversarial examples:  85%|████████▍ | 849/1000 [21:52:34<3:23:32, 80.88s/it]
Generating adversarial examples:  85%|████████▌ | 850/1000 [21:55:29<4:32:58, 109.19s/it]
Generating adversarial examples:  85%|████████▌ | 851/1000 [21:56:35<3:58:38, 96.10s/it] 
Generating adversarial examples:  85%|████████▌ | 852/1000 [22:00:43<5:49:48, 141.81s/it]
Generating adversarial examples:  85%|████████▌ | 853/1000 [22:07:32<9:03:40, 221.90s/it]
Generating adversarial examples:  85%|████████▌ | 854/1000 [22:07:32<6:18:09, 155.41s/it]
Generating adversarial examples:  86%|████████▌ | 855/1000 [22:07:32<4:23:04, 108.86s/it]
Generating adversarial examples:  86%|████████▌ | 856/1000 [22:07:33<3:03:03, 76.28s/it] 
Generating adversarial examples:  86%|████████▌ | 857/1000 [22:10:20<4:07:10, 103.71s/it]
Generating adversarial examples:  86%|████████▌ | 858/1000 [22:11:23<3:36:06, 91.32s/it] 
Generating adversarial examples:  86%|████████▌ | 859/1000 [22:13:38<4:05:55, 104.65s/it]
Generating adversarial examples:  86%|████████▌ | 860/1000 [22:15:40<4:16:22, 109.87s/it]
Generating adversarial examples:  86%|████████▌ | 861/1000 [22:15:41<2:58:21, 76.99s/it] 
Generating adversarial examples:  86%|████████▌ | 862/1000 [22:16:40<2:44:59, 71.73s/it]
Generating adversarial examples:  86%|████████▋ | 863/1000 [22:16:40<1:54:49, 50.29s/it]
Generating adversarial examples:  86%|████████▋ | 864/1000 [22:18:12<2:22:17, 62.78s/it]
Generating adversarial examples:  86%|████████▋ | 865/1000 [22:19:14<2:20:16, 62.34s/it]
Generating adversarial examples:  87%|████████▋ | 866/1000 [22:20:18<2:20:32, 62.93s/it]
Generating adversarial examples:  87%|████████▋ | 867/1000 [22:22:18<2:57:24, 80.04s/it]
Generating adversarial examples:  87%|████████▋ | 868/1000 [22:24:33<3:32:07, 96.42s/it]
Generating adversarial examples:  87%|████████▋ | 869/1000 [22:25:33<3:07:04, 85.68s/it]
Generating adversarial examples:  87%|████████▋ | 870/1000 [22:25:33<2:10:06, 60.05s/it]
Generating adversarial examples:  87%|████████▋ | 871/1000 [22:25:34<1:30:32, 42.11s/it]
Generating adversarial examples:  87%|████████▋ | 872/1000 [22:25:34<1:03:02, 29.55s/it]
Generating adversarial examples:  87%|████████▋ | 873/1000 [22:28:54<2:51:04, 80.82s/it]
Generating adversarial examples:  87%|████████▋ | 874/1000 [22:31:09<3:23:28, 96.89s/it]
Generating adversarial examples:  88%|████████▊ | 875/1000 [22:32:07<2:57:23, 85.15s/it]
Generating adversarial examples:  88%|████████▊ | 876/1000 [22:33:05<2:39:33, 77.21s/it]
Generating adversarial examples:  88%|████████▊ | 877/1000 [22:35:20<3:13:56, 94.61s/it]
Generating adversarial examples:  88%|████████▊ | 878/1000 [22:38:06<3:55:32, 115.84s/it]
Generating adversarial examples:  88%|████████▊ | 879/1000 [22:40:01<3:53:25, 115.75s/it]
Generating adversarial examples:  88%|████████▊ | 880/1000 [22:41:52<3:48:10, 114.09s/it]
Generating adversarial examples:  88%|████████▊ | 881/1000 [22:41:52<2:38:32, 79.94s/it] 
Generating adversarial examples:  88%|████████▊ | 882/1000 [22:41:52<1:50:11, 56.03s/it]
Generating adversarial examples:  88%|████████▊ | 883/1000 [22:41:52<1:16:37, 39.29s/it]
Generating adversarial examples:  88%|████████▊ | 884/1000 [22:42:53<1:28:31, 45.78s/it]
Generating adversarial examples:  88%|████████▊ | 885/1000 [23:01:12<11:33:20, 361.74s/it]
Generating adversarial examples:  89%|████████▊ | 886/1000 [23:02:15<8:36:52, 272.04s/it] 
Generating adversarial examples:  89%|████████▊ | 887/1000 [23:03:19<6:34:54, 209.69s/it]
Generating adversarial examples:  89%|████████▉ | 888/1000 [23:12:24<9:39:06, 310.24s/it]
Generating adversarial examples:  89%|████████▉ | 889/1000 [23:17:02<9:16:04, 300.58s/it]
Generating adversarial examples:  89%|████████▉ | 890/1000 [23:19:16<7:39:41, 250.74s/it]
Generating adversarial examples:  89%|████████▉ | 891/1000 [23:25:00<8:25:58, 278.52s/it]
Generating adversarial examples:  89%|████████▉ | 892/1000 [23:26:05<6:26:00, 214.45s/it]
Generating adversarial examples:  89%|████████▉ | 893/1000 [23:26:05<4:27:50, 150.19s/it]
Generating adversarial examples:  89%|████████▉ | 894/1000 [23:26:05<3:05:51, 105.21s/it]
Generating adversarial examples:  90%|████████▉ | 895/1000 [23:26:06<2:09:00, 73.72s/it] 
Generating adversarial examples:  90%|████████▉ | 896/1000 [23:27:25<2:11:00, 75.58s/it]
Generating adversarial examples:  90%|████████▉ | 897/1000 [23:27:26<1:30:57, 52.98s/it]
Generating adversarial examples:  90%|████████▉ | 898/1000 [23:44:38<9:49:29, 346.76s/it]
Generating adversarial examples:  90%|████████▉ | 899/1000 [23:44:38<6:48:43, 242.81s/it]
Generating adversarial examples:  90%|█████████ | 900/1000 [23:47:44<6:16:16, 225.76s/it]
Generating adversarial examples:  90%|█████████ | 901/1000 [23:53:11<7:02:37, 256.14s/it]
Generating adversarial examples:  90%|█████████ | 902/1000 [23:55:46<6:08:37, 225.68s/it]
Generating adversarial examples:  90%|█████████ | 903/1000 [23:56:47<4:44:58, 176.27s/it]
Generating adversarial examples:  90%|█████████ | 904/1000 [23:58:04<3:54:19, 146.46s/it]
Generating adversarial examples:  90%|█████████ | 905/1000 [23:59:39<3:27:47, 131.24s/it]
Generating adversarial examples:  91%|█████████ | 906/1000 [23:59:40<2:24:02, 91.94s/it] 
Generating adversarial examples:  91%|█████████ | 907/1000 [23:59:40<1:39:52, 64.43s/it]
Generating adversarial examples:  91%|█████████ | 908/1000 [24:17:45<9:28:22, 370.68s/it]
Generating adversarial examples:  91%|█████████ | 909/1000 [24:20:14<7:41:03, 303.99s/it]
Generating adversarial examples:  91%|█████████ | 910/1000 [24:22:24<6:17:53, 251.93s/it]
Generating adversarial examples:  91%|█████████ | 911/1000 [24:22:24<4:21:41, 176.42s/it]
Generating adversarial examples:  91%|█████████ | 912/1000 [24:22:25<3:01:14, 123.57s/it]
Generating adversarial examples:  91%|█████████▏| 913/1000 [24:23:25<2:31:43, 104.64s/it]
Generating adversarial examples:  91%|█████████▏| 914/1000 [24:25:39<2:42:43, 113.53s/it]
Generating adversarial examples:  92%|█████████▏| 915/1000 [24:25:39<1:52:41, 79.55s/it] 
Generating adversarial examples:  92%|█████████▏| 916/1000 [24:29:20<2:50:34, 121.83s/it]
Generating adversarial examples:  92%|█████████▏| 917/1000 [24:32:36<3:19:29, 144.21s/it]
Generating adversarial examples:  92%|█████████▏| 918/1000 [24:33:42<2:44:41, 120.50s/it]
Generating adversarial examples:  92%|█████████▏| 919/1000 [24:35:22<2:34:30, 114.45s/it]
Generating adversarial examples:  92%|█████████▏| 920/1000 [24:38:47<3:08:58, 141.73s/it]
Generating adversarial examples:  92%|█████████▏| 921/1000 [24:40:16<2:45:32, 125.73s/it]
Generating adversarial examples:  92%|█████████▏| 922/1000 [24:43:19<3:06:04, 143.13s/it]
Generating adversarial examples:  92%|█████████▏| 923/1000 [24:45:10<2:51:14, 133.43s/it]
Generating adversarial examples:  92%|█████████▏| 924/1000 [24:49:23<3:34:16, 169.17s/it]
Generating adversarial examples:  92%|█████████▎| 925/1000 [24:49:23<2:28:06, 118.49s/it]
Generating adversarial examples:  93%|█████████▎| 926/1000 [24:50:29<2:06:34, 102.63s/it]
Generating adversarial examples:  93%|█████████▎| 927/1000 [24:51:28<1:48:57, 89.56s/it] 
Generating adversarial examples:  93%|█████████▎| 928/1000 [24:54:14<2:15:06, 112.60s/it]
Generating adversarial examples:  93%|█████████▎| 929/1000 [24:54:14<1:33:21, 78.89s/it] 
Generating adversarial examples:  93%|█████████▎| 930/1000 [24:54:15<1:04:30, 55.30s/it]
Generating adversarial examples:  93%|█████████▎| 931/1000 [24:55:19<1:06:37, 57.93s/it]
Generating adversarial examples:  93%|█████████▎| 932/1000 [24:57:09<1:23:19, 73.53s/it]
Generating adversarial examples:  93%|█████████▎| 933/1000 [24:58:07<1:17:03, 69.01s/it]
Generating adversarial examples:  93%|█████████▎| 934/1000 [24:59:17<1:16:15, 69.32s/it]
Generating adversarial examples:  94%|█████████▎| 935/1000 [25:00:47<1:21:54, 75.60s/it]
Generating adversarial examples:  94%|█████████▎| 936/1000 [25:01:49<1:16:18, 71.54s/it]
Generating adversarial examples:  94%|█████████▎| 937/1000 [25:01:50<52:39, 50.15s/it]  
Generating adversarial examples:  94%|█████████▍| 938/1000 [25:03:01<58:16, 56.39s/it]
Generating adversarial examples:  94%|█████████▍| 939/1000 [25:04:16<1:02:59, 61.96s/it]
Generating adversarial examples:  94%|█████████▍| 940/1000 [25:06:14<1:18:55, 78.93s/it]
Generating adversarial examples:  94%|█████████▍| 941/1000 [25:06:14<54:23, 55.32s/it]  
Generating adversarial examples:  94%|█████████▍| 942/1000 [25:07:16<55:13, 57.13s/it]
Generating adversarial examples:  94%|█████████▍| 943/1000 [25:08:57<1:06:56, 70.46s/it]
Generating adversarial examples:  94%|█████████▍| 944/1000 [25:08:57<46:06, 49.40s/it]  
Generating adversarial examples:  94%|█████████▍| 945/1000 [25:10:46<1:01:31, 67.13s/it]
Generating adversarial examples:  95%|█████████▍| 946/1000 [25:13:01<1:18:50, 87.60s/it]
Generating adversarial examples:  95%|█████████▍| 947/1000 [25:13:02<54:13, 61.39s/it]  
Generating adversarial examples:  95%|█████████▍| 948/1000 [25:14:04<53:23, 61.60s/it]
Generating adversarial examples:  95%|█████████▍| 949/1000 [25:15:10<53:31, 62.98s/it]
Generating adversarial examples:  95%|█████████▌| 950/1000 [25:17:57<1:18:27, 94.15s/it]
Generating adversarial examples:  95%|█████████▌| 951/1000 [25:19:18<1:13:43, 90.28s/it]
Generating adversarial examples:  95%|█████████▌| 952/1000 [25:19:18<50:37, 63.27s/it]  
Generating adversarial examples:  95%|█████████▌| 953/1000 [25:20:16<48:15, 61.61s/it]
Generating adversarial examples:  95%|█████████▌| 954/1000 [25:38:18<4:41:51, 367.64s/it]
Generating adversarial examples:  96%|█████████▌| 955/1000 [25:39:28<3:28:50, 278.47s/it]
Generating adversarial examples:  96%|█████████▌| 956/1000 [25:39:28<2:22:59, 195.00s/it]
Generating adversarial examples:  96%|█████████▌| 957/1000 [25:41:38<2:05:41, 175.39s/it]
Generating adversarial examples:  96%|█████████▌| 958/1000 [25:44:01<1:56:03, 165.79s/it]
Generating adversarial examples:  96%|█████████▌| 959/1000 [25:46:05<1:44:40, 153.18s/it]
Generating adversarial examples:  96%|█████████▌| 960/1000 [25:46:05<1:11:32, 107.30s/it]
Generating adversarial examples:  96%|█████████▌| 961/1000 [25:46:06<48:52, 75.19s/it]   
Generating adversarial examples:  96%|█████████▌| 962/1000 [25:47:07<44:54, 70.91s/it]
Generating adversarial examples:  96%|█████████▋| 963/1000 [25:48:03<40:57, 66.42s/it]
Generating adversarial examples:  96%|█████████▋| 964/1000 [25:48:03<27:56, 46.57s/it]
Generating adversarial examples:  96%|█████████▋| 965/1000 [25:49:13<31:14, 53.55s/it]
Generating adversarial examples:  97%|█████████▋| 966/1000 [25:50:49<37:33, 66.28s/it]
Generating adversarial examples:  97%|█████████▋| 967/1000 [25:52:17<40:09, 73.02s/it]
Generating adversarial examples:  97%|█████████▋| 968/1000 [25:56:19<1:05:51, 123.48s/it]
Generating adversarial examples:  97%|█████████▋| 969/1000 [25:58:47<1:07:39, 130.96s/it]
Generating adversarial examples:  97%|█████████▋| 970/1000 [26:00:31<1:01:23, 122.80s/it]
Generating adversarial examples:  97%|█████████▋| 971/1000 [26:00:31<41:34, 86.03s/it]   
Generating adversarial examples:  97%|█████████▋| 972/1000 [26:02:29<44:39, 95.69s/it]
Generating adversarial examples:  97%|█████████▋| 973/1000 [26:06:02<58:53, 130.86s/it]
Generating adversarial examples:  97%|█████████▋| 974/1000 [26:06:02<39:43, 91.68s/it] 
Generating adversarial examples:  98%|█████████▊| 975/1000 [26:06:03<26:46, 64.25s/it]
Generating adversarial examples:  98%|█████████▊| 976/1000 [26:07:02<25:10, 62.93s/it]
Generating adversarial examples:  98%|█████████▊| 977/1000 [26:08:53<29:38, 77.34s/it]
Generating adversarial examples:  98%|█████████▊| 978/1000 [26:08:54<19:52, 54.21s/it]
Generating adversarial examples:  98%|█████████▊| 979/1000 [26:08:54<13:18, 38.02s/it]
Generating adversarial examples:  98%|█████████▊| 980/1000 [26:10:09<16:24, 49.23s/it]
Generating adversarial examples:  98%|█████████▊| 981/1000 [26:11:38<19:20, 61.10s/it]
Generating adversarial examples:  98%|█████████▊| 982/1000 [26:14:31<28:23, 94.66s/it]
Generating adversarial examples:  98%|█████████▊| 983/1000 [26:16:02<26:27, 93.40s/it]
Generating adversarial examples:  98%|█████████▊| 984/1000 [26:17:19<23:35, 88.48s/it]
Generating adversarial examples:  98%|█████████▊| 985/1000 [26:17:19<15:30, 62.01s/it]
Generating adversarial examples:  99%|█████████▊| 986/1000 [26:19:22<18:44, 80.33s/it]
Generating adversarial examples:  99%|█████████▊| 987/1000 [26:21:27<20:17, 93.66s/it]
Generating adversarial examples:  99%|█████████▉| 988/1000 [26:21:27<13:07, 65.64s/it]
Generating adversarial examples:  99%|█████████▉| 989/1000 [26:24:48<19:28, 106.20s/it]
Generating adversarial examples:  99%|█████████▉| 990/1000 [26:24:48<12:24, 74.42s/it] 
Generating adversarial examples:  99%|█████████▉| 991/1000 [26:26:18<11:51, 79.11s/it]
Generating adversarial examples:  99%|█████████▉| 992/1000 [26:26:18<07:23, 55.45s/it]
Generating adversarial examples:  99%|█████████▉| 993/1000 [26:27:59<08:03, 69.14s/it]
Generating adversarial examples:  99%|█████████▉| 994/1000 [26:29:23<07:20, 73.47s/it]
Generating adversarial examples: 100%|█████████▉| 995/1000 [26:33:28<10:25, 125.08s/it]
Generating adversarial examples: 100%|█████████▉| 996/1000 [26:35:24<08:08, 122.12s/it]
Generating adversarial examples: 100%|█████████▉| 997/1000 [26:35:24<04:16, 85.56s/it] 
Generating adversarial examples: 100%|█████████▉| 998/1000 [26:37:52<03:28, 104.47s/it]
Generating adversarial examples: 100%|█████████▉| 999/1000 [26:37:53<01:13, 73.21s/it] 
Generating adversarial examples: 100%|██████████| 1000/1000 [26:39:21<00:00, 77.75s/it]
Generating adversarial examples: 100%|██████████| 1000/1000 [26:39:21<00:00, 95.96s/it]

Training:   0%|          | 0/102 [00:00<?, ?it/s]/home/tthiep/Hiep/Adversarial-Attacks/./adversarial_train/train_opti.py:114: UserWarning: To copy construct from a tensor, it is recommended to use sourceTensor.clone().detach() or sourceTensor.clone().detach().requires_grad_(True), rather than torch.tensor(sourceTensor).
  labels = torch.tensor(labels).to(device)

Training:   0%|          | 0/102 [00:01<?, ?it/s]
Traceback (most recent call last):
  File "/home/tthiep/Hiep/Adversarial-Attacks/./adversarial_train/train_opti.py", line 116, in <module>
    outputs = model(**inputs, labels=labels)
              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/torch/nn/modules/module.py", line 1532, in _wrapped_call_impl
    return self._call_impl(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/torch/nn/modules/module.py", line 1541, in _call_impl
    return forward_call(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/transformers/models/bert/modeling_bert.py", line 1691, in forward
    outputs = self.bert(
              ^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/torch/nn/modules/module.py", line 1532, in _wrapped_call_impl
    return self._call_impl(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/torch/nn/modules/module.py", line 1541, in _call_impl
    return forward_call(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/transformers/models/bert/modeling_bert.py", line 1137, in forward
    encoder_outputs = self.encoder(
                      ^^^^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/torch/nn/modules/module.py", line 1532, in _wrapped_call_impl
    return self._call_impl(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/torch/nn/modules/module.py", line 1541, in _call_impl
    return forward_call(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/transformers/models/bert/modeling_bert.py", line 690, in forward
    layer_outputs = layer_module(
                    ^^^^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/torch/nn/modules/module.py", line 1532, in _wrapped_call_impl
    return self._call_impl(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/torch/nn/modules/module.py", line 1541, in _call_impl
    return forward_call(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/transformers/models/bert/modeling_bert.py", line 580, in forward
    self_attention_outputs = self.attention(
                             ^^^^^^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/torch/nn/modules/module.py", line 1532, in _wrapped_call_impl
    return self._call_impl(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/torch/nn/modules/module.py", line 1541, in _call_impl
    return forward_call(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/transformers/models/bert/modeling_bert.py", line 519, in forward
    attention_output = self.output(self_outputs[0], hidden_states)
                       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/torch/nn/modules/module.py", line 1532, in _wrapped_call_impl
    return self._call_impl(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/torch/nn/modules/module.py", line 1541, in _call_impl
    return forward_call(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/transformers/models/bert/modeling_bert.py", line 461, in forward
    hidden_states = self.dense(hidden_states)
                    ^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/torch/nn/modules/module.py", line 1532, in _wrapped_call_impl
    return self._call_impl(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/torch/nn/modules/module.py", line 1541, in _call_impl
    return forward_call(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tthiep/.conda/envs/myenv/lib/python3.11/site-packages/torch/nn/modules/linear.py", line 116, in forward
    return F.linear(input, self.weight, self.bias)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
torch.cuda.OutOfMemoryError: CUDA out of memory. Tried to allocate 14.00 MiB. GPU