A brake ECU sets two sensor state flags to fix states of first and second master pressure sensors as an abnormal state when a value of a simultaneous timer becomes equal to or larger than an abnormal-state fixing time. The simultaneous timer serves to measure a time that the first master pressure sensor is determined to be not under a normal state and the second master pressure sensor is determined to be not under a normal state on the basis of the sensor state flags. The abnormal-state fixing time is set to a time shorter than an abnormal-state fixing time used for changing the state of each of the master pressure sensors from an invalid state to an abnormal state.