Repository navigation
Routing dispatch pool saturates its in-flight threshold: legs stall waiting for ThreadPool threads (portal thread starvation) #5229
Description
What is failing
The Orleans routing grain's dispatch pool saturates its in-flight threshold (64) on the portal pods, so route legs queue for a pool slot and streaming deliveries to client activations are delayed by back-pressure episodes.
Probable cause (medium confidence)
The burst's own gauges point at ThreadPool-thread starvation on the portal pods, not a slot leak or downstream congestion:
waiting for a pool slotis high (56–63 of 64) whilerouting pool subscribingis near zero (0–4) — per the log's own diagnostic rule this is a thread shortage: legs are stuck in the unbounded pre-subscribe wait for a ThreadPool thread.- Every leg is young (oldest 2–433 ms) — load the silo is absorbing, not a leaked slot (which would show a minutes-old leg).
- On pod
...jntbn, ordered channels queued 0 over 0 destinations with deepest queue 0 — nothing is waiting downstream, so downstream I/O is ruled out; on pod...wpg9m37 queued over 2 destinations with deepest 1 is multiplexer load, consistent with the same reading. - Episode counter increments (Update release-packages.yml #19 → Update release-packages.yml #21 on activation
92d075de) with ~7s spacing — episodes drain and re-cross, i.e. recurring absorption of a load spike, not a monotonically stuck state.
Impact
Short (≈2-minute) burst at 2026-09-22 ~11:02–11:04 UTC across both portal pods; 16 occurrences. Real-time route deliveries were briefly throttled but no evidence of any leg failing or a slot leaking. This is an observability-worthy capacity symptom, not an outage — but if a silo becomes CPU-starved for longer, the same mechanism delays all streaming updates.
Where to look
MeshWeaver.Hosting.Orleans.RoutingGrain route-dispatch pool: the leg prologue's unbounded wait for a ThreadPool thread (the wait is taken before the leg's own timeouts start). Consider bounding/flagging that wait, or sizing the pool against the ThreadPool's actual capacity; related prior work is referenced in the log text itself (issues #5009 head-of-line channels, #5018 pool gauges). This fingerprint is one of many routine back-pressure bursts at the same log site over the past days — treat this ticket as the thread-starvation exemplar, not a new defect.
Evidence
| Fingerprint | 053952dcbe25816d |
| Category | MeshWeaver.Hosting.Orleans.RoutingGrain |
| Severity | Critical |
| Namespace | memex-cloud |
| Pods | memex-portal-deployment-5bb495d47b-jntbn, memex-portal-deployment-58f7cdffc5-wpg9m |
| Occurrences | 16 |
| First seen | 2026-09-22 11:02:27Z |
| Last seen | 2026-09-22 11:04:25Z |
| Routing | not determined — no configured route matches the category MeshWeaver.Hosting.Orleans.RoutingGrain. This repository is the configured fallback, not a finding about who owns the fault; the category names the LOGGER, which may not be the subject. |
Recent log lines
2026-09-22 11:04:08Z memex-portal-deployment-5bb495d47b-jntbn crit: MeshWeaver.Hosting.Orleans.RoutingGrain[0]
[ROUTE] Routing back-pressure [92d075de#19 started 2026-09-22T11:04:08.4263497Z]: 64 route dispatches in flight (reporting threshold 64); ordered channels queued 0 over 0 stream destination(s), deepest per-channel queue 0, routing pool subscribing 0, waiting for a pool slot 63; oldest leg in flight 4 ms — dispatch → DoublePendulum/_Access/gregc1473_Access (delivery bZLTN3JUE02WgWsV8GLWKg). Latest dispatch target WebSearch/_GitSync — the address that happened to cross the threshold, NOT a diagnosis. A slot is held from dispatch until the leg terminates, INCLUDING the unbounded wait for a ThreadPool thread before the leg's own timeouts start, so a CPU-starved silo raises this with nothing stuck. A CHANNEL is (destination, stream), so a deepest queue of 1 or more means legs of the SAME stream are blocked behind one another (head-of-line within one channel); 0 means nothing is waiting on anything, so read it as load. Many channels over FEW destinations is a multiplexer hub draining in parallel, which is load too — before issue #5009 those legs shared one channel and read as head-of-line. 🚨 THE TWO POOL GAUGES ANSWER DIFFERENT QUESTIONS AND ONLY ONE SEES THE WAIT NAMED ABOVE — issue #5018. 'subscribing' counts legs inside their SUBSCRIBE PROLOGUE only, so a leg still waiting for a ThreadPool thread and a leg already past its subscribe BOTH read 0 there; 'waiting for a pool slot' is the gauge that sees the pre-subscribe wait. High while subscribing is below the pool's cap is a THREAD shortage; both near zero means the legs are past their subscribe and the wait is downstream I/O. 🚨 READ THE OLDEST LEG FIRST: it is the only load-vs-leak discriminator available from a SINGLE line — every leg young is load the silo is absorbing, one leg minutes old is a slot that never came back and the label names it — whereas the episode stamp below needs a SECOND line to say anything. 🚨 Deepest is sampled AT THE CROSSING, so like th…[truncated]
2026-09-22 11:04:14Z memex-portal-deployment-5bb495d47b-jntbn crit: MeshWeaver.Hosting.Orleans.RoutingGrain[0]
[ROUTE] Routing back-pressure [92d075de#20 started 2026-09-22T11:04:14.8468925Z]: 64 route dispatches in flight (reporting threshold 64); ordered channels queued 0 over 0 stream destination(s), deepest per-channel queue 0, routing pool subscribing 0, waiting for a pool slot 62; oldest leg in flight 3 ms — dispatch → thomas.mager/_Install/LearningRoadmap (delivery Q5Hs-Ahkaki5eE39CZHUSg). Latest dispatch target Hosting/PluginPublicationDelivery/_Access/Anonymous_Access — the address that happened to cross the threshold, NOT a diagnosis. A slot is held from dispatch until the leg terminates, INCLUDING the unbounded wait for a ThreadPool thread before the leg's own timeouts start, so a CPU-starved silo raises this with nothing stuck. A CHANNEL is (destination, stream), so a deepest queue of 1 or more means legs of the SAME stream are blocked behind one another (head-of-line within one channel); 0 means nothing is waiting on anything, so read it as load. Many channels over FEW destinations is a multiplexer hub draining in parallel, which is load too — before issue #5009 those legs shared one channel and read as head-of-line. 🚨 THE TWO POOL GAUGES ANSWER DIFFERENT QUESTIONS AND ONLY ONE SEES THE WAIT NAMED ABOVE — issue #5018. 'subscribing' counts legs inside their SUBSCRIBE PROLOGUE only, so a leg still waiting for a ThreadPool thread and a leg already past its subscribe BOTH read 0 there; 'waiting for a pool slot' is the gauge that sees the pre-subscribe wait. High while subscribing is below the pool's cap is a THREAD shortage; both near zero means the legs are past their subscribe and the wait is downstream I/O. 🚨 READ THE OLDEST LEG FIRST: it is the only load-vs-leak discriminator available from a SINGLE line — every leg young is load the silo is absorbing, one leg minutes old is a slot that never came back and the label names it — whereas the episode stamp below needs a SECOND line to say anything. 🚨 Deepest …[truncated]
2026-09-22 11:04:21Z memex-portal-deployment-5bb495d47b-jntbn crit: MeshWeaver.Hosting.Orleans.RoutingGrain[0]
[ROUTE] Routing back-pressure [92d075de#21 started 2026-09-22T11:04:21.2834846Z]: 64 route dispatches in flight (reporting threshold 64); ordered channels queued 0 over 0 stream destination(s), deepest per-channel queue 0, routing pool subscribing 4, waiting for a pool slot 56; oldest leg in flight 2 ms — dispatch → adrianrg/_Install/Maps (delivery JMBdzp2KsE6z4AJDOEpCHQ). Latest dispatch target lafayette.alves/_Install/Chess — the address that happened to cross the threshold, NOT a diagnosis. A slot is held from dispatch until the leg terminates, INCLUDING the unbounded wait for a ThreadPool thread before the leg's own timeouts start, so a CPU-starved silo raises this with nothing stuck. A CHANNEL is (destination, stream), so a deepest queue of 1 or more means legs of the SAME stream are blocked behind one another (head-of-line within one channel); 0 means nothing is waiting on anything, so read it as load. Many channels over FEW destinations is a multiplexer hub draining in parallel, which is load too — before issue #5009 those legs shared one channel and read as head-of-line. 🚨 THE TWO POOL GAUGES ANSWER DIFFERENT QUESTIONS AND ONLY ONE SEES THE WAIT NAMED ABOVE — issue #5018. 'subscribing' counts legs inside their SUBSCRIBE PROLOGUE only, so a leg still waiting for a ThreadPool thread and a leg already past its subscribe BOTH read 0 there; 'waiting for a pool slot' is the gauge that sees the pre-subscribe wait. High while subscribing is below the pool's cap is a THREAD shortage; both near zero means the legs are past their subscribe and the wait is downstream I/O. 🚨 READ THE OLDEST LEG FIRST: it is the only load-vs-leak discriminator available from a SINGLE line — every leg young is load the silo is absorbing, one leg minutes old is a slot that never came back and the label names it — whereas the episode stamp below needs a SECOND line to say anything. 🚨 Deepest is sampled AT THE CROSSING, so like the in-…[truncated]
2026-09-22 11:04:25Z memex-portal-deployment-58f7cdffc5-wpg9m crit: MeshWeaver.Hosting.Orleans.RoutingGrain[0]
[ROUTE] Routing back-pressure [942df5b4#2 started 2026-09-22T11:04:25.1238864Z]: 64 route dispatches in flight (reporting threshold 64); ordered channels queued 37 over 2 stream destination(s), deepest per-channel queue 0, routing pool subscribing 0, waiting for a pool slot 19; oldest leg in flight 17 ms — stream-routed → cache/-dk5L69WpUeM0KjZtV-P7Q (delivery 1f54Xoy9hkevRrfVMxG_oQ). Latest dispatch target Ifrs17/EstimateType — the address that happened to cross the threshold, NOT a diagnosis. A slot is held from dispatch until the leg terminates, INCLUDING the unbounded wait for a ThreadPool thread before the leg's own timeouts start, so a CPU-starved silo raises this with nothing stuck. A CHANNEL is (destination, stream), so a deepest queue of 1 or more means legs of the SAME stream are blocked behind one another (head-of-line within one channel); 0 means nothing is waiting on anything, so read it as load. Many channels over FEW destinations is a multiplexer hub draining in parallel, which is load too — before issue #5009 those legs shared one channel and read as head-of-line. 🚨 THE TWO POOL GAUGES ANSWER DIFFERENT QUESTIONS AND ONLY ONE SEES THE WAIT NAMED ABOVE — issue #5018. 'subscribing' counts legs inside their SUBSCRIBE PROLOGUE only, so a leg still waiting for a ThreadPool thread and a leg already past its subscribe BOTH read 0 there; 'waiting for a pool slot' is the gauge that sees the pre-subscribe wait. High while subscribing is below the pool's cap is a THREAD shortage; both near zero means the legs are past their subscribe and the wait is downstream I/O. 🚨 READ THE OLDEST LEG FIRST: it is the only load-vs-leak discriminator available from a SINGLE line — every leg young is load the silo is absorbing, one leg minutes old is a slot that never came back and the label names it — whereas the episode stamp below needs a SECOND line to say anything. 🚨 Deepest is sampled AT THE CROSSING, so like the in…[truncated]
2026-09-22 11:04:25Z memex-portal-deployment-58f7cdffc5-wpg9m crit: MeshWeaver.Hosting.Orleans.RoutingGrain[0]
[ROUTE] Routing back-pressure [942df5b4#3 started 2026-09-22T11:04:25.5410900Z]: 64 route dispatches in flight (reporting threshold 64); ordered channels queued 31 over 2 stream destination(s), deepest per-channel queue 1, routing pool subscribing 0, waiting for a pool slot 20; oldest leg in flight 433 ms — stream-routed → cache/avUnHtlEYUal3T29C7FQcQ (delivery YnQRbRIvc0m3aHwQHNCryw). Latest dispatch target LossModelling — the address that happened to cross the threshold, NOT a diagnosis. A slot is held from dispatch until the leg terminates, INCLUDING the unbounded wait for a ThreadPool thread before the leg's own timeouts start, so a CPU-starved silo raises this with nothing stuck. A CHANNEL is (destination, stream), so a deepest queue of 1 or more means legs of the SAME stream are blocked behind one another (head-of-line within one channel); 0 means nothing is waiting on anything, so read it as load. Many channels over FEW destinations is a multiplexer hub draining in parallel, which is load too — before issue #5009 those legs shared one channel and read as head-of-line. 🚨 THE TWO POOL GAUGES ANSWER DIFFERENT QUESTIONS AND ONLY ONE SEES THE WAIT NAMED ABOVE — issue #5018. 'subscribing' counts legs inside their SUBSCRIBE PROLOGUE only, so a leg still waiting for a ThreadPool thread and a leg already past its subscribe BOTH read 0 there; 'waiting for a pool slot' is the gauge that sees the pre-subscribe wait. High while subscribing is below the pool's cap is a THREAD shortage; both near zero means the legs are past their subscribe and the wait is downstream I/O. 🚨 READ THE OLDEST LEG FIRST: it is the only load-vs-leak discriminator available from a SINGLE line — every leg young is load the silo is absorbing, one leg minutes old is a slot that never came back and the label names it — whereas the episode stamp below needs a SECOND line to say anything. 🚨 Deepest is sampled AT THE CROSSING, so like the in-flig…[truncated]
Re-addressed by the current identity function: this incident inherited e4a97855ab595beb (Systemorph/MeshWeaver.Plugins#1796). Those nodes are superseded and will not fold, file or comment again.
Opened automatically from Admin/_LogIncident/053952dcbe25816d. Recurrences are folded into this issue rather than opening new ones.
Activity
rbuergi commentedon Sep 22, 2026
Closing as a duplicate of #5118 — the fingerprint-split flood.
Why this is a duplicate. Every one of these comes from the same log site —
[ROUTE] Routing back-pressure, categoryMeshWeaver.Hosting.Orleans.RoutingGrain— split into one issue per grain activation. The 8-hex activation id survived normalization (a0e2984b→a0e2{n}b):HexBlobrequired 16+ chars, andNumber()then masked only the digit-run preceded by a digit, leaving a per-activation residue in the hash.Measured over 101 verbatim bursts drawn from 29 issues, covering 42 activation ids: the old parser yields 41 distinct fingerprints, the current parser yields 1.
The fix is already merged in MeshWeaver.Plugins — #2165 (
MixedHexId), #2167, #2168 (positional episode/target masking) and #2218 (the portal re-parses raw samples, instead of hashing text a stale watcher already masked).It is not live yet. The control instance is sealed on an older set because the Plugins Portal image rebuild workflow fails at its GitHub App token step —
actions: writeis not granted to the installation — so core's rebuild is never dispatched. Until that is granted, new split issues will keep arriving, and an issue whose activation is still alive may reopen here.Not closed by this. The underlying routing condition — cache-destination head-of-line blocking versus ThreadPool starvation — is a real defect and stays open in #5118. The normaliser itself is tracked in #5270 and #5271.
rbuergi commentedon Sep 22, 2026
Why this is its own issue, and what stops the next one — posted on each RoutingGrain back-pressure incident issue filed 2026-09-22; not a disposition of this one.
This incident's fingerprint was split from its siblings by two values the incident normaliser did not mask — the delivery id and a single-segment destination in the line's
oldest leg in flight … — dispatch → <address> (delivery <id>)field — not by the episode stamp, which was already masked. Fixed in Systemorph/MeshWeaver.Plugins#2286 (merged 2026-09-22T21:46Z asb922f070fc): over the 146 back-pressure samples quoted in the open core issues (43 filed fingerprints), the identity now yields 3 (one per leg kind, plus the pre-#5151 wording). It reaches production with the portal roll; existing incidents re-address onto their successors throughLogIncidentCorpusMigration.What the crossing itself means is a separate question and is not answered by the fix above. A line reading high
waiting for a pool slotwithrouting pool subscribing 0is legs the ThreadPool had not yet run (the pool's cap is 256 and no permit is held — see #5261 (comment)); that starvation root is being investigated separately (family: #5018, #4886). A line with a non-zerodeepest per-channel queueon acache/…destination and an old oldest leg is #5009's falsifier and should be raised there.Disposition stays with triage: a symptom gauge can invert the causal arrow, so this issue's own sample may carry evidence its siblings do not.