Uncovering Uncontrolled Repetition through Residual Stream Dynamics
Not on the map. Why?
Abstract (arXiv)
Uncontrolled repetition can prolong autoregressive generation in large language models (LLMs) and enable resource consumption attacks. Prior analyses of repetitive generation have identified strongly activated features in intermediate and late layers. However, how uncontrolled repetition activity emerges and develops before becoming prominent in these layers remains insufficiently understood. In this paper, we investigate this question primarily in large vision-language models (LVLMs), which support a richer set of uncontrolled repetitions through both visual and textual inputs. We propose Tokenwise Residual Comparison (TRC), a method that identifies and localizes anomalies associated with repetition from residual dynamics during generation. TRC compares attention and multilayer perceptron writes to the residual stream across generated tokens to identify patterns associated with repetition. It then selectively suppresses coordinates in the residual stream at the identified layer. Experiments show that TRC effectively mitigates uncontrolled repetition, reducing loop rates by 57% on average. Our analysis further shows that repetition semantics emerge in shallow layers and propagate through the residual stream, disrupting normal representations. TRC also generalizes to large language models (LLMs) and large reasoning models (LRMs), where it consistently captures analogous repetition dynamics and achieves effective mitigation. Our work broadens the study of repetitive generation from its prominent internal representations to earlier opportunities for intervention, providing insights for mitigating resource consumption attacks.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 45 of its 53 references that are in the map. First posted on arXiv 30 Sep 2026.
Builds on
45 of 53 references.
References · 45
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2023Improved Baselines with Visual Instruction Tuningcited by 4,362
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2019The Curious Case of Neural Text Degenerationcited by 2,881
- 2022Locating and Editing Factual Associations in GPTcited by 2,609
- 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,970
- 2022Learn to Explain: Multimodal Reasoning via Thought Chains for Science Question Answeringcited by 1,881
- 2019Towards VQA Models That Can Readcited by 1,696
- 2020Transformer Feed-Forward Layers Are Key-Value Memoriescited by 1,307
- 2022Contrastive Decoding: Open-ended Text Generation as Optimizationcited by 598
- 2021Knowledge Neurons in Pretrained Transformerscited by 590
33 more
- 2022Transformer Feed-Forward Layers Build Predictions by Promoting Concepts in the Vocabulary Spacecited by 522
- 2019Neural Text Generation with Unlikelihood Trainingcited by 489
- 2020BERT-ATTACK: Adversarial Attack Against BERT Using BERTcited by 488
- 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Promptscited by 368
- 2020BAE: BERT-based Adversarial Examples for Text Classificationcited by 316
- 2023Visual Adversarial Examples Jailbreak Aligned Large Language Modelscited by 307
- 2018Audio Adversarial Examples: Targeted Attacks on Speech-to-Textcited by 268
- 2024Token-Budget-Aware LLM Reasoningcited by 242
- 2021Gradient-based Adversarial Attacks against Text Transformerscited by 233
- 2022A Contrastive Framework for Neural Text Generationcited by 224
- 2022Towards Adversarial Attack on Vision-Language Pre-training Modelscited by 142
- 2019Imperceptible, Robust, and Targeted Adversarial Examples for Automatic Speech Recognitioncited by 123
- 2019Don't Say That! Making Inconsistent Dialogue Unlikely with Unlikelihood Trainingcited by 110
- 2020Sponge Examples: Energy-Latency Attacks on Neural Networkscited by 108
- 2023Set-level Guidance Attack: Boosting Adversarial Transferability of Vision-Language Pre-training Modelscited by 106
- 2022Learning to Break the Loop: Analyzing and Mitigating Repetitions for Neural Text Generationcited by 90
- 2024Inducing High Energy-Latency of Large Vision-Language Models with Verbose Imagescited by 69
- 2023VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Modelscited by 66
- 2024Cross-modal Information Flow in Multimodal Large Language Modelscited by 65
- 2020A Panda? No, It's a Sloth: Slowdown Attacks on Adaptive Multi-Exit Neural Network Inferencecited by 61
- 2024Fantastic Semantics and Where to Find Them: Investigating Which Layers of Generative LLMs Reflect Lexical Semanticscited by 43
- 2025Understanding the Repeat Curse in Large Language Models from a Feature Perspectivecited by 36
- 2024Denial-of-Service Poisoning Attacks against Large Language Modelscited by 34
- 2024Crabs: Consuming Resource via Auto-generation for LLM-DoS Attack under Black-box Settingscited by 33
- 2024An Engorgio Prompt Makes Large Language Model Babble oncited by 30
- 2024Repetition Neurons: How Do Language Models Produce Repetitions?cited by 22
- 2025Interpreting the Repeated Token Phenomenon in Large Language Modelscited by 15
- 2023Penalty Decoding: Well Suppress the Self-Reinforcement Effect in Open-Ended Text Generationcited by 13
- 2025LingoLoop Attack: Trapping MLLMs via Linguistic Context and State Entrapment into Endless Loopscited by 9
- 2025LoopLLM: Transferable Energy-Latency Attacks in LLMs via Repetitive Generationcited by 7
- 2026Fine-Grained Activation Steering: Steering Less, Achieving Morecited by 6
- 2026Resource Consumption Threats in Large Language Modelscited by 2
- 2024MLissard: Multilingual Long and Simple Sequential Reasoning Benchmarkscited by 1
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Context Tokens are Anchors: Understanding the Repetition Curse in dMLLMs from an Information Flow Perspective
- 2026Mind the Spike: Mechanisms and Brittleness of Visual Massive Activations in Large Vision-Language Models
- 2025Where MLLMs Attend and What They Rely On: Explaining Autoregressive Token Generation
- 2025Curing Semantic Drift: A Dynamic Approach to Grounding Generation in Large Vision-Language Models
- 2026FlashBack: Knowing When to Remember in Streaming Vision-Language Models
- 2026Layer Collapse in Diffusion Language Models
- 2025When Token Pruning is Worse than Random: Understanding Visual Token Information in VLLMs
- 2025Overflow Prevention Enhances Long-Context Recurrent LLMs