After the fault is removed by re-burn the flash, these deives has been running for about twenty-four hours, currently they seem normal. The rest of MCU should be working correctly, such as CAN communication, we can read state and control the deivce ON/OFF by CAN, but changing duty by CAN is invalid, in other words, only the PWM duty part is abnormal.
While running without external CAN command, the PWMDTY01 register is set with a two bytes constant.
In the previous test, ten of evleven devices has the failure, then we thought it is a common phenomenon, so we don't try another chip.
Daniel, thanks for your support.