-> % sudo chroot /         
[1]    93188 killed     sudo chroot /
-> % sudo dmesg | grep AMFI
[1281783.098834]: AMFI: hook..execve() hardened runtime not allowed in chrootAMFI: hook..execve() killing pid 93189: not allowed in chrootThe hardened runtime is enforced for all executables bundled as part of macOS. As such, chroot isn’t usable anymore for running a macOS CLI environment.
Things will work if you disable SIP: https://developer.apple.com/documentation/security/disabling_and_enabling_system_integrity_protection