The format program can randomly select configurations that will run forever (for example, small caches and large numbers of application threads spending all of their time on eviction).

Randomly-generated runs should be limited to some reasonable value, perhaps 6 hours.