Planner system recovery for autonomous vehicles

1. A system for controlling a vehicle in an autonomous driving mode using trajectories, the system comprising:

one or more first computing devices; and

one or more second computing devices in communication with the one or more first computing systems,

wherein the one or more second computing devices are configured to:

generate a first trajectory;

generate an error message identifying a recoverable error; and

generate a second trajectory within a predetermined period of time after the error message is generated in order to avoid having the vehicle stop or pull over because the one or more second computing devices cannot timely provide a trajectory to the one or more first computing devices while recovering from an error, and

wherein the one or more first computing devices are configured to:

receive the first trajectory from the one or more second computing devices;

control the vehicle in the autonomous driving mode to follow at least a portion of the first trajectory;

receive the second trajectory from the one or more second computing devices; and

control the vehicle in the autonomous mode to stop following the first trajectory and start following the second trajectory.

2. The system of claim 1 , wherein when the one or more second computing devices are unable to generate the second trajectory within the predetermined period of time after the error message is generated, the one or more first computing devices are configured to control the vehicle according to a fallback solution provided by the first trajectory, the fallback solution including instructions for controlling the vehicle to stop or pull over.

3. The system of claim 1 , wherein when the one or more second computing devices are able to generate the second trajectory within the predetermined period of time after the error message is generated, the one or more first computing devices are configured to control the vehicle according to the second trajectory.

4. The system of claim 1 , wherein the recoverable error is an error caused by running out of time to compute a trajectory.

5. The system of claim 4 , wherein the recoverable error is an error caused by an inability to find a valid geometry for a trajectory.

6. The system of claim 5 , wherein the inability to find a valid geometry for a trajectory is due to a momentary perception error.

7. The system of claim 1 , wherein the recoverable error is included in a recoverable error list.

8. A method of controlling a vehicle in an autonomous driving mode using trajectories, the method comprising:

receiving, by one or more first computing devices of the vehicle, a first trajectory from one or more second computing devices of the vehicle;

controlling, by the one or more first computing devices, the vehicle in the autonomous driving mode to follow at least a portion of the first trajectory;

generating, by the one or more second computing devices, an error message identifying a recoverable error;

generating, by the one or more second computing devices, a second trajectory within a predetermined period of time after the error message is generated in order to avoid having the vehicle stop or pull over because the one or more second computing devices cannot timely provide a new trajectory to the one or more first computing devices while recovering from an error;

receiving, by one or more first computing devices, the second trajectory from the one or more second computing devices; and

controlling, by the one or more first computing devices, the vehicle in the autonomous driving mode to stop following the first trajectory and start following the second trajectory.

9. The method of claim 8 , wherein when the one or more second computing devices are unable to generate the second trajectory within the predetermined period of time after the error message is generated, controlling, by the one or more first computing devices, the vehicle according to a fallback solution provided by the first trajectory, the fallback solution including instructions for controlling the vehicle to stop or pull over.

10. The method of claim 8 , wherein when the one or more second computing devices are able to generate the second trajectory within the predetermined period of time after the error message is generated, controlling, by the one or more first computing devices, the vehicle according to the second trajectory.

11. The method of claim 8 , wherein the recoverable error is an error caused by running out of time to compute a trajectory.

12. The method of claim 8 , wherein the recoverable error is an error caused by an inability to find a valid geometry for a trajectory.

13. The method of claim 12 , wherein the inability to find a valid geometry for a trajectory is due to a momentary perception error.

14. The method of claim 8 , wherein the recoverable error is included in a recoverable error list.

15. The method of claim 14 , wherein the one or more second computing devices attempt to generate the second trajectory after determining that the recoverable error is included in the recoverable error list.

16. The method of claim 8 , wherein the one or more second computing devices are comprised by a planner system of the vehicle.

17. The method of claim 8 , wherein generating the second trajectory is further based on a count of errors generating trajectories.

18. The method of claim 17 , wherein the count of errors is a count of recoverable errors of a particular error type.

19. The method of claim 17 , wherein the count of errors is a count of recoverable errors of all error types.

20. The method of claim 17 , wherein the count of errors is a count of errors for a trip between an initial location and a destination.