Fix bug: st_service_pump may invoke wild pointer if services' lifecycle are shorter than it's.
Fix bug: start_service may fall into dead loop if all services are very quickly run out.