Self-Study Reconsidered: The Hidden Fragility of Learning from Self-Generated QA
On the map: Synthetic data and self-improvement for LLMs → Synthetic reasoning data and bootstrapping
Abstract (arXiv)
Language models are increasingly taught from synthetic question--answer (QA) supervision: a model generates questions about a document, answers them from the same text, and the resulting pairs are used to fine-tune, distill, or compress knowledge into another model. We show that this generation step is not neutral preprocessing. It is an implicit policy that both selects which evidence becomes training signal and decides how that evidence is answered, and it is fragile at both stages. When choosing what to ask, generators do not scan a document uniformly. Coverage saturates early and concentrates on salient spans, diverse prompts converge on the same regions, and what looks question-worthy is driven by local presentation. As a result, salient artifacts such as poorly cleaned markup can hijack question generation across model families and scales. When answering, the model that produces the supervision tends to obey instruction-like passages embedded in the text. This compliance depends on the intent and surface form of the passage rather than its strictness, and is worst under task conflict, where larger models comply more often. These failure modes arise from choices made during QA generation, so they can be reduced without changing the training loop. Tying each question to a fixed target reduces biased selection, and filtering instruction-like spans before answering lowers mean injection compliance from 88% to 13% in our evaluation while retaining nearly all clean text.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Synthetic reasoning data and bootstrapping, one of 13 directions in Synthetic data and self-improvement for LLMs. Builds on 35 of its 51 references that are in the map. First posted on arXiv 30 Jun 2026.
Builds on
35 of 51 references.
References · 35
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2025Qwen3 Technical Reportcited by 8,195
- 2023Lost in the Middle: How Language Models Use Long Contextscited by 3,383
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,674
- 2025Gemma 3 Technical Reportcited by 1,686
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
- 2023Quantifying Language Models' Sensitivity to Spurious Features in Prompt Design or: How I learned to start worrying about prompt formattingcited by 778
- 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 760
- 2024InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agentscited by 476
- 2021A Dataset of Information-Seeking Questions and Answers Anchored in Research Paperscited by 475
- 2024The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructionscited by 441
- 2022Unnatural Instructions: Tuning Language Models with (Almost) No Human Laborcited by 395
23 more
- 2024Magpie: Alignment Data Synthesis from Scratch by Prompting Aligned LLMs with Nothingcited by 341
- 2024StruQ: Defending Against Prompt Injection with Structured Queriescited by 325
- 2023Poisoning Web-Scale Training Datasets is Practicalcited by 276
- 2023Physics of Language Models: Part 3.1, Knowledge Storage and Extractioncited by 264
- 2023ARES: An Automated Evaluation Framework for Retrieval-Augmented Generation Systemscited by 259
- 2024PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Modelscited by 251
- 2022Promptagator: Few-shot Dense Retrieval From 8 Examplescited by 233
- 2024Defending Against Indirect Prompt Injection Attacks With Spotlightingcited by 233
- 2023Backdooring Instruction-Tuned Large Language Models with Virtual Prompt Injectioncited by 143
- 2023On the Exploitability of Instruction Tuningcited by 110
- 2024Best Practices and Lessons Learned on Synthetic Datacited by 104
- 2025PromptArmor: Simple yet Effective Prompt Injection Defensescited by 98
- 2023InPars-v2: Large Language Models as Efficient Dataset Generators for Information Retrievalcited by 73
- 2025Self-Adapting Language Modelscited by 71
- 2024Synthetic continued pretrainingcited by 56
- 2025Parametric Retrieval Augmented Generationcited by 38
- 2024LongHealth: A Question Answering Benchmark with Long Clinical Documentscited by 33
- 2024Genie: Achieving Human Parity in Content-Grounded Datasets Generationcited by 31
- 2026Fast KV Compaction via Attention Matchingcited by 28
- 2025Learning Facts at Scale with Active Readingcited by 11
- 2025Automatic Dataset Generation for Knowledge Intensive Question Answering Taskscited by 6
- 2026Cartridges at Scale: Training Modular KV Caches over Large Document Collectionscited by 6
- 2026Synthetic Mixed Training: Scaling Parametric Knowledge Acquisition Beyond RAGcited by 1
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026What Am I Missing? Question-Answering as Hidden State Probing
- 2022Language Models (Mostly) Know What They Know
- 2026Questioning the Questions: Sustaining Self-Evolution in Reasoning Models
- 2024STaR-GATE: Teaching Language Models to Ask Clarifying Questions
- 2022An Empirical Investigation of Commonsense Self-Supervision with Knowledge Graphs
- 2026Bridging the Know-Act Gap via Task-Level Autoregressive Reasoning
- 2026ReasonLab: A Controlled and Auditable Evaluation of Prompting Techniques for Multiple-Choice QA
- 2022Measuring and Narrowing the Compositionality Gap in Language Models