I have been doing this for months, and for the first time it is failing.
systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=7+8 /dev/nvme0n1p5
(found from reddit) and
systemd-cryptenroll --wipe-slot tpm2 --tpm2-device auto --tpm2-pcrs "1+3+5+7+11+12+14+15" /dev/nvme0n1p3
gets
Failed to add TPM2 JSON token to LUKS2 header: No space left on device