为什么我写的这个程序在VC++中运行时会出现exe已停止工作？求大神助攻！

这是我写的程序：
# include <stdio.h>
# include <malloc.h>
# include <stdlib.h>

typedef struct Node
{
int data;
struct Node *pNext;
}NODE,*pNODE;

pNODE Creat_list();
void Traverse_list(pNODE pHead);
bool is_empty(pNODE pHead);
int length_list(pNODE pHead);

int main(void)
{
pNODE pHead = NULL;
pHead = Creat_list();
Traverse_list(pHead);
length_list(pHead);
printf("此链表的长度为：%d\n",length_list(pHead));
/* if(is_empty(pHead))
printf("此链表为空！\n");
else
printf("此链表不为空！\n");*/

return 0;
}

pNODE Creat_list(void)
{
int i,len = 0,val;
pNODE pHead = (pNODE)malloc(sizeof(NODE));
if(NULL == pHead)
{
printf("分配失败，程序终止！\n");
exit(-1);
}

pNODE pTail = pHead;
pTail->pNext = NULL;

printf("请输入您想要创建链表节点数: len = ",len);
scanf("%d",&len);
for(i = 0;i < len; ++i)
{
printf("请输入第%d个节点的值：",i+1);
scanf("%d",&val);
pNODE pNew = (pNODE)malloc(sizeof(NODE));
if(NULL == pNew)
{
printf("分配失败，程序终止！\n");
exit(-1);
}
pNew->data = val;
pTail->pNext = pNew;
pNew->pNext = NULL;
pTail = pNew;
}
return pHead;
}

void Traverse_list(pNODE pHead)
{
pNODE p = pHead->pNext;
while(NULL != pHead->pNext)
{
printf("%d \t",p->data);
p = p->pNext;

}
printf("\n");
}

bool is_empty(pNODE pHead)
{

if(pHead->pNext == NULL)
return true;
else
return false;
}

int length_list(pNODE pHead)
{
pNODE p = pHead->pNext;
int len = 0;
while(p != NULL)
{
++len;
p = p->pNext;
}
return len;
}