diff --git a/tools/gn2bp/gen_android_bp b/tools/gn2bp/gen_android_bp
index 24d5584..b31fe82 100755
--- a/tools/gn2bp/gen_android_bp
+++ b/tools/gn2bp/gen_android_bp
@@ -1066,7 +1066,7 @@
     # Order matters for some targets. For example, base/time/time_exploded_icu.cc
     # in //base:base needs to have sysroot include after icu/source/common
     # include. So adding sysroot include at the end.
-    for flag in target.cflags:
+    for flag in sorted(target.cflags):
       if '--sysroot' in flag:
         sysroot = flag[len('--sysroot=../../'):]
         if sysroot == "build/linux/debian_bullseye_amd64-sysroot":