centos7 xfs lmv cloning on smaller device

The problem is that your cloning process did not copy the selinux file labels.

Boot in permissive mode, touch /.autorelabel, reboot again. The system will label all files with the default labels from the policy (which might not be 100% accurate, but will still be much better than it is now).

After that you should be able to boot into enforcing mode again.