Do Extension need extra provisoning profile?

Yes [1] [2].

An app extension has a different bundle ID than its containing app, and hence a different App ID. Each unique App ID needs a profile to authorise it to run.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

[1] Well, there may be a way to avoid this on macOS but that comes with drawbacks. So, if you can do this on macOS, you should.

[2] Oh, and in some circumstances you can use a wildcard profile to cover both App IDs but, honestly, things are easier to understand if you ignore wildcard profiles.