In our case, the reason of the issue was preventing GET_TASK operation for the crashed process in Endpoint Security system extension. coreservicesd needs it in Monterey when the process calls NSFileManager's methods. The solution was muting the coreservicesd for es_client intercepting ES_EVENT_TYPE_AUTH_GET_TASK.

The same thing also for me.