wince 5.0 CE target Control crash issue

[5.0 CE target Control crash issue@discussions.microsoft.com wince 5.0 CE target Control crash issue]

OS: wince 5.0
Platform: TI DM350
I make a usb rndis driver for this project to debug the target machine with
platform builder.
The average usb kitl debug features such as remote tools are good.
But I find a crash during use of target control tool.
When I type "?" in the target control shell.
The shell cranshes after below information displays
"
Enter any of the following commands at the prompt:
break : Breaks into the debugger
s <procname> : Starts new process
gi [\"proc\",\"thrd\",\"mod\",\"all\"]* [\"<pattern>\"] : Get Information
proc -> Lists all processes in the system
thrd -> Lists all processes with their threads
delta -> Lists only threads that have changes in CPU times
mod -> Lists all modules loaded
moduse -> Lists module usage data
system -> Lists processor architecture and OS version
all -> Lists all of the above
mi [\"kernel\",\"full\"] : Memory information
kernel-> Lists kernel memory detail
full -> Lists full memory maps
zo [\"p\",\"m\",\"h\"] [index,name,handle]
[<zone>,[[\"on\",\"off\"][<zoneindex>]*]*: Zone Ops
p/m/h -> Selects whether you operate on a process, module, or
hProcess/pModule
index -> Put the index of the proc/module, as printed by the gi command
name -> Put the name of the proc/module, as printed by the gi command
"
I debug this issue through trace32 and find that the write access on
endpoint 2 of usb fails.
Does anybody encounter this kind of issue?
Any comments and help are very thankful.