diff --git a/criu/crtools.c b/criu/crtools.c
index ba805b9cc..6cc6cf3ea 100644
--- a/criu/crtools.c
+++ b/criu/crtools.c
@@ -25,11 +25,9 @@
 #include "crtools.h"
 #include "cr_options.h"
 #include "external.h"
-#include "sockets.h"
 #include "files.h"
 #include "sk-inet.h"
 #include "net.h"
-#include "netfilter.h"
 #include "version.h"
 #include "page-xfer.h"
 #include "tty.h"
@@ -700,9 +698,6 @@ int main(int argc, char *argv[], char *envp[])
 		pr_info("Will do snapshot from %s\n", opts.img_parent);
 
 	if (!strcmp(argv[optind], "dump")) {
-		preload_socket_modules();
-		preload_netfilter_modules();
-
 		if (!tree_id)
 			goto opt_pid_missing;
 		return cr_dump_tasks(tree_id);
@@ -716,7 +711,6 @@ int main(int argc, char *argv[], char *envp[])
 	}
 
 	if (!strcmp(argv[optind], "restore")) {
-		preload_netfilter_modules();
 		if (tree_id)
 			pr_warn("Using -t with criu restore is obsoleted\n");
 
diff --git a/criu/kerndat.c b/criu/kerndat.c
index f946cef78..354fb672b 100644
--- a/criu/kerndat.c
+++ b/criu/kerndat.c
@@ -29,6 +29,7 @@
 #include "sk-inet.h"
 #include <compel/plugins/std/syscall-codes.h>
 #include <compel/compel.h>
+#include "netfilter.h"
 
 struct kerndat_s kdat = {
 };
@@ -647,6 +648,9 @@ int kerndat_init(void)
 	if (ret <= 0)
 		return ret;
 
+	preload_socket_modules();
+	preload_netfilter_modules();
+
 	ret = check_pagemap();
 	if (!ret)
 		ret = kerndat_get_shmemdev();