diff --git a/net/sched/sch_api.c b/net/sched/sch_api.c
index c927d511bb650919b1afd47919d1eb5088d01093..448bfcdeab25fea10779740f2d7694f92f573282 100644
--- a/net/sched/sch_api.c
+++ b/net/sched/sch_api.c
@@ -1514,6 +1514,10 @@ static int tc_modify_qdisc(struct sk_buff *skb, struct nlmsghdr *n,
 					NL_SET_ERR_MSG(extack, "Qdisc parent/child loop detected");
 					return -ELOOP;
 				}
+				if (clid == TC_H_INGRESS) {
+					NL_SET_ERR_MSG(extack, "Ingress cannot graft directly");
+					return -EINVAL;
+				}
 				qdisc_refcount_inc(q);
 				goto graft;
 			} else {