If a voltage of each of a plurality of capacitor cells forming a capacitor is lower than a system malfunction voltage V(1), and if the voltage of any one of the capacitor cells is higher than a cell charge inhibition voltage V(2) lower than the system malfunction voltage V(1), an ECU executes a program including a step of setting a limit value WIN(C) of electric power to be stored in the capacitor to be "0".