An automotive vehicle having a pre-selected function, and including a controller which controls an object and includes a plurality of redundant elements which are redundant with each other, and a function restraining portion which partially or fully restrains the function of the vehicle, when a pre-selected failure which has occurred to one of the redundant elements has not solved before another of the redundant elements has operated for more than a pre-set time since the occurrence of the failure.