diff --git a/man2/keyctl.2 b/man2/keyctl.2
index 7540cd9fe..a03a340c1 100644
--- a/man2/keyctl.2
+++ b/man2/keyctl.2
@@ -1379,6 +1379,13 @@ was
 and an invalid permission bit was specified in
 .IR arg3 .
 .TP
+.B EINVAL
+.I operation
+is
+.B KEYCTL_DH_COMPUTE
+and the buffer size provided is not enough to hold the result.
+Provide 0 as a buffer size in order to obtain the minimum buffer size.
+.TP
 .B EKEYEXPIRED
 An expired key was found or specified.
 .TP
@@ -1395,30 +1402,6 @@ is
 and the requested link would cause the maximum nesting depth
 for keyrings to be exceeded.
 .TP
-.B ENOKEY
-No matching key was found or an invalid key was specified.
-.TP
-.B ENOKEY
-The value
-.B KEYCTL_GET_KEYRING_ID
-was specified in
-.IR operation ,
-the key specified in
-.I arg2
-did not exist, and
-.I arg3
-was zero (meaning don't create the key if it didn't exist).
-.TP
-.B EOPNOTSUPP
-.I operation
-is
-.B KEYCTL_UPDATE
-and the key type does not support updating.
-.TP
-.B ENOTDIR
-A key of keyring type was expected but the ID of a key with
-a different type was provided.
-.TP
 .B ENFILE
 .\" FIXME Does this error really occur? I could not find where
 .\"       in the kernel source it is generated, but have not tested
@@ -1434,6 +1417,30 @@ is
 .B KEYCTL_UNLINK
 and the key to be unlinked isn't linked to the keyring.
 .TP
+.B ENOKEY
+No matching key was found or an invalid key was specified.
+.TP
+.B ENOKEY
+The value
+.B KEYCTL_GET_KEYRING_ID
+was specified in
+.IR operation ,
+the key specified in
+.I arg2
+did not exist, and
+.I arg3
+was zero (meaning don't create the key if it didn't exist).
+.TP
+.B ENOTDIR
+A key of keyring type was expected but the ID of a key with
+a different type was provided.
+.TP
+.B EOPNOTSUPP
+.I operation
+is
+.B KEYCTL_UPDATE
+and the key type does not support updating.
+.TP
 .B EPERM
 .I operation
 was
@@ -1448,13 +1455,6 @@ the parent process is not single-thread;
 or the parent process is
 .BR init (1)
 or a kernel thread.
-.TP
-.B EINVAL
-.I operation
-is
-.B KEYCTL_DH_COMPUTE
-and the buffer size provided is not enough to hold the result.
-Provide 0 as a buffer size in order to obtain the minimum buffer size.
 .SH VERSIONS
 This system call first appeared in Linux 2.6.11.
 .SH CONFORMING TO