Why can one slow (not crashed) downstream service take down services that call it?

Every caller keeps sending requests and waiting, one thread per in-flight call — under real load, the CALLERS exhaust their own thread pools waiting on a service that was never going to respond in time, spreading the failure to services that were themselves perfectly healthy.