Thanks for prompt answer!
Ok, I've found a workaround -- restarting android.hardware.camera.provider process fixes the problem. I guess it starts before user have a chance to enter decryption password and tries to read something from /data or some other not yet mounted partition.
I'm not yet...