When a CPU problem or a abnormal power supply voltage is detected, the MICUs move to the hardware fail-safe mode, and each system output load is set to the pre-programmed fail-safe value.