Win10 with broken nested support on AMD Threadripper 2

<domain xmlns:qemu="http://libvirt.org/schemas/domain/qemu/1.0" type="kvm">
  <name>win10-work</name>
  <uuid></uuid>
  <metadata>
    <libosinfo:libosinfo xmlns:libosinfo="http://libosinfo.org/xmlns/libvirt/domain/1.0">
      <libosinfo:os id="http://microsoft.com/win/10"/>
    </libosinfo:libosinfo>
  </metadata>
  <memory unit="KiB">33554432</memory>
  <currentMemory unit="KiB">33554432</currentMemory>
  <memoryBacking>
    <hugepages>
      <page size="1048576" unit="KiB"/>
    </hugepages>
    <nosharepages/>
    <locked/>
    <source type="memfd"/>
    <access mode="shared"/>
    <allocation mode="immediate"/>
    <discard/>
  </memoryBacking>
  <vcpu placement="static" current="36">48</vcpu>
  <vcpus>
    <vcpu id="0" enabled="yes" hotpluggable="no" order="1"/>
    <vcpu id="1" enabled="yes" hotpluggable="yes" order="2"/>
    <vcpu id="2" enabled="yes" hotpluggable="yes" order="3"/>
    <vcpu id="3" enabled="yes" hotpluggable="yes" order="4"/>
    <vcpu id="4" enabled="yes" hotpluggable="yes" order="5"/>
    <vcpu id="5" enabled="yes" hotpluggable="yes" order="6"/>
    <vcpu id="6" enabled="no" hotpluggable="yes"/>
    <vcpu id="7" enabled="no" hotpluggable="yes"/>
    <vcpu id="8" enabled="yes" hotpluggable="yes" order="7"/>
    <vcpu id="9" enabled="yes" hotpluggable="yes" order="8"/>
    <vcpu id="10" enabled="yes" hotpluggable="yes" order="9"/>
    <vcpu id="11" enabled="yes" hotpluggable="yes" order="10"/>
    <vcpu id="12" enabled="yes" hotpluggable="yes" order="11"/>
    <vcpu id="13" enabled="yes" hotpluggable="yes" order="12"/>
    <vcpu id="14" enabled="no" hotpluggable="yes"/>
    <vcpu id="15" enabled="no" hotpluggable="yes"/>
    <vcpu id="16" enabled="yes" hotpluggable="yes" order="13"/>
    <vcpu id="17" enabled="yes" hotpluggable="yes" order="14"/>
    <vcpu id="18" enabled="yes" hotpluggable="yes" order="15"/>
    <vcpu id="19" enabled="yes" hotpluggable="yes" order="16"/>
    <vcpu id="20" enabled="yes" hotpluggable="yes" order="17"/>
    <vcpu id="21" enabled="yes" hotpluggable="yes" order="18"/>
    <vcpu id="22" enabled="no" hotpluggable="yes"/>
    <vcpu id="23" enabled="no" hotpluggable="yes"/>
    <vcpu id="24" enabled="yes" hotpluggable="yes" order="19"/>
    <vcpu id="25" enabled="yes" hotpluggable="yes" order="20"/>
    <vcpu id="26" enabled="yes" hotpluggable="yes" order="21"/>
    <vcpu id="27" enabled="yes" hotpluggable="yes" order="22"/>
    <vcpu id="28" enabled="yes" hotpluggable="yes" order="23"/>
    <vcpu id="29" enabled="yes" hotpluggable="yes" order="24"/>
    <vcpu id="30" enabled="no" hotpluggable="yes"/>
    <vcpu id="31" enabled="no" hotpluggable="yes"/>
    <vcpu id="32" enabled="yes" hotpluggable="yes" order="25"/>
    <vcpu id="33" enabled="yes" hotpluggable="yes" order="26"/>
    <vcpu id="34" enabled="yes" hotpluggable="yes" order="27"/>
    <vcpu id="35" enabled="yes" hotpluggable="yes" order="28"/>
    <vcpu id="36" enabled="yes" hotpluggable="yes" order="29"/>
    <vcpu id="37" enabled="yes" hotpluggable="yes" order="30"/>
    <vcpu id="38" enabled="no" hotpluggable="yes"/>
    <vcpu id="39" enabled="no" hotpluggable="yes"/>
    <vcpu id="40" enabled="yes" hotpluggable="yes" order="31"/>
    <vcpu id="41" enabled="yes" hotpluggable="yes" order="32"/>
    <vcpu id="42" enabled="yes" hotpluggable="yes" order="33"/>
    <vcpu id="43" enabled="yes" hotpluggable="yes" order="34"/>
    <vcpu id="44" enabled="yes" hotpluggable="yes" order="35"/>
    <vcpu id="45" enabled="yes" hotpluggable="yes" order="36"/>
    <vcpu id="46" enabled="no" hotpluggable="yes"/>
    <vcpu id="47" enabled="no" hotpluggable="yes"/>
  </vcpus>
  <cputune>
    <vcpupin vcpu="0" cpuset="0"/>
    <vcpupin vcpu="1" cpuset="24"/>
    <vcpupin vcpu="2" cpuset="1"/>
    <vcpupin vcpu="3" cpuset="25"/>
    <vcpupin vcpu="4" cpuset="2"/>
    <vcpupin vcpu="5" cpuset="26"/>
    <vcpupin vcpu="8" cpuset="3"/>
    <vcpupin vcpu="9" cpuset="27"/>
    <vcpupin vcpu="10" cpuset="4"/>
    <vcpupin vcpu="11" cpuset="28"/>
    <vcpupin vcpu="12" cpuset="5"/>
    <vcpupin vcpu="13" cpuset="29"/>
    <vcpupin vcpu="16" cpuset="6"/>
    <vcpupin vcpu="17" cpuset="30"/>
    <vcpupin vcpu="18" cpuset="7"/>
    <vcpupin vcpu="19" cpuset="31"/>
    <vcpupin vcpu="20" cpuset="8"/>
    <vcpupin vcpu="21" cpuset="32"/>
    <vcpupin vcpu="24" cpuset="9"/>
    <vcpupin vcpu="25" cpuset="33"/>
    <vcpupin vcpu="26" cpuset="10"/>
    <vcpupin vcpu="27" cpuset="34"/>
    <vcpupin vcpu="28" cpuset="11"/>
    <vcpupin vcpu="29" cpuset="35"/>
    <vcpupin vcpu="32" cpuset="36"/>
    <vcpupin vcpu="33" cpuset="37"/>
    <vcpupin vcpu="34" cpuset="38"/>
    <vcpupin vcpu="35" cpuset="39"/>
    <vcpupin vcpu="36" cpuset="40"/>
    <vcpupin vcpu="37" cpuset="41"/>
    <vcpupin vcpu="40" cpuset="42"/>
    <vcpupin vcpu="41" cpuset="43"/>
    <vcpupin vcpu="42" cpuset="44"/>
    <vcpupin vcpu="43" cpuset="45"/>
    <vcpupin vcpu="44" cpuset="46"/>
    <vcpupin vcpu="45" cpuset="47"/>
    <emulatorpin cpuset="10-11"/>
  </cputune>
  <resource>
    <partition>/machine</partition>
  </resource>
  <os>
    <type arch="x86_64" machine="pc-q35-6.0">hvm</type>
    <loader readonly="yes" secure="yes" type="pflash">/usr/share/edk2/ovmf/OVMF_CODE.secboot.fd</loader>
    <nvram>/var/lib/libvirt/qemu/nvram/win10-work_VARS.fd</nvram>
    <boot dev="hd"/>
    <smbios mode="host"/>
  </os>
  <features>
    <acpi/>
    <apic eoi="on"/>
    <hap state="on"/>
    <hyperv>
      <relaxed state="on"/>
      <vapic state="off"/>
      <spinlocks state="on" retries="8191"/>
      <vpindex state="on"/>
      <runtime state="on"/>
      <synic state="off"/>
      <stimer state="off"/>
      <reset state="off"/>
      <vendor_id state="on" value="PlaceboValue"/>
      <frequencies state="on"/>
      <reenlightenment state="on"/>
      <tlbflush state="on"/>
      <ipi state="on"/>
      <evmcs state="off"/>
    </hyperv>
    <kvm>
      <hidden state="on"/>
      <poll-control state="on"/>
    </kvm>
    <smm state="on"/>
    <ioapic driver="kvm"/>
  </features>
  <cpu mode="host-passthrough" check="full" migratable="off">
    <topology sockets="1" dies="3" cores="8" threads="2"/>
    <cache mode="passthrough"/>
    <feature policy="require" name="svm"/>
    <feature policy="require" name="x2apic"/>
    <feature policy="require" name="amd-stibp"/>
    <feature policy="require" name="amd-ssbd"/>
    <feature policy="require" name="ibpb"/>
    <feature policy="require" name="wbnoinvd"/>
    <feature policy="require" name="clwb"/>
    <feature policy="require" name="xsaves"/>
    <feature policy="require" name="rdpid"/>
    <feature policy="require" name="umip"/>
    <feature policy="require" name="xsaveerptr"/>
    <feature policy="require" name="clzero"/>
    <feature policy="require" name="invtsc"/>
    <feature policy="require" name="topoext"/>
  </cpu>
  <clock offset="localtime">
    <timer name="rtc" present="yes" tickpolicy="catchup"/>
    <timer name="pit" present="yes" tickpolicy="delay"/>
    <timer name="hpet" present="no" tickpolicy="discard"/>
    <timer name="hypervclock" present="yes"/>
    <timer name="tsc" present="yes" tickpolicy="discard" mode="native"/>
  </clock>
  <on_poweroff>destroy</on_poweroff>
  <on_reboot>restart</on_reboot>
  <on_crash>destroy</on_crash>
  <pm>
    <suspend-to-mem enabled="no"/>
    <suspend-to-disk enabled="no"/>
  </pm>
  <devices>
    <emulator>/usr/bin/qemu-system-x86_64</emulator>
    <disk type="block" device="disk">
      <driver name="qemu" type="raw" cache="writeback" io="io_uring" discard="unmap" detect_zeroes="unmap"/>
      <source dev="/dev/zvol/win10-vm/win10-work"/>
      <backingStore/>
      <target dev="sda" bus="scsi" rotation_rate="1"/>
      <address type="drive" controller="0" bus="0" target="0" unit="0"/>
    </disk>
    <controller type="sata" index="0">
      <address type="pci" domain="0x0000" bus="0x00" slot="0x1f" function="0x2"/>
    </controller>
    <controller type="pci" index="0" model="pcie-root"/>
    <controller type="pci" index="1" model="pcie-root-port">
      <model name="pcie-root-port"/>
      <target chassis="1" port="0x8"/>
      <address type="pci" domain="0x0000" bus="0x00" slot="0x01" function="0x0" multifunction="on"/>
    </controller>
    <controller type="pci" index="2" model="pcie-root-port">
      <model name="pcie-root-port"/>
      <target chassis="2" port="0x9"/>
      <address type="pci" domain="0x0000" bus="0x00" slot="0x01" function="0x1"/>
    </controller>
    <controller type="pci" index="3" model="pcie-root-port">
      <model name="pcie-root-port"/>
      <target chassis="3" port="0xa"/>
      <address type="pci" domain="0x0000" bus="0x00" slot="0x01" function="0x2"/>
    </controller>
    <controller type="pci" index="4" model="pcie-root-port">
      <model name="pcie-root-port"/>
      <target chassis="4" port="0xb"/>
      <address type="pci" domain="0x0000" bus="0x00" slot="0x01" function="0x3"/>
    </controller>
    <controller type="pci" index="5" model="pcie-root-port">
      <model name="pcie-root-port"/>
      <target chassis="5" port="0xc"/>
      <address type="pci" domain="0x0000" bus="0x00" slot="0x01" function="0x4"/>
    </controller>
    <controller type="pci" index="6" model="pcie-root-port">
      <model name="pcie-root-port"/>
      <target chassis="6" port="0xd"/>
      <address type="pci" domain="0x0000" bus="0x00" slot="0x01" function="0x5"/>
    </controller>
    <controller type="pci" index="7" model="pcie-root-port">
      <model name="pcie-root-port"/>
      <target chassis="7" port="0xe"/>
      <address type="pci" domain="0x0000" bus="0x00" slot="0x01" function="0x6"/>
    </controller>
    <controller type="pci" index="8" model="pcie-root-port">
      <model name="pcie-root-port"/>
      <target chassis="8" port="0xf"/>
      <address type="pci" domain="0x0000" bus="0x00" slot="0x01" function="0x7"/>
    </controller>
    <controller type="pci" index="9" model="pcie-root-port">
      <model name="pcie-root-port"/>
      <target chassis="9" port="0x10"/>
      <address type="pci" domain="0x0000" bus="0x00" slot="0x02" function="0x0" multifunction="on"/>
    </controller>
    <controller type="pci" index="10" model="pcie-root-port">
      <model name="pcie-root-port"/>
      <target chassis="10" port="0x11"/>
      <address type="pci" domain="0x0000" bus="0x00" slot="0x02" function="0x1"/>
    </controller>
    <controller type="pci" index="11" model="pcie-root-port">
      <model name="pcie-root-port"/>
      <target chassis="11" port="0x12"/>
      <address type="pci" domain="0x0000" bus="0x00" slot="0x02" function="0x2"/>
    </controller>
    <controller type="pci" index="12" model="pcie-root-port">
      <model name="pcie-root-port"/>
      <target chassis="12" port="0x13"/>
      <address type="pci" domain="0x0000" bus="0x00" slot="0x02" function="0x3"/>
    </controller>
    <controller type="pci" index="13" model="pcie-to-pci-bridge">
      <model name="pcie-pci-bridge"/>
      <address type="pci" domain="0x0000" bus="0x01" slot="0x00" function="0x0"/>
    </controller>
    <controller type="pci" index="14" model="pci-bridge">
      <model name="pci-bridge"/>
      <target chassisNr="14"/>
      <address type="pci" domain="0x0000" bus="0x0d" slot="0x01" function="0x0"/>
    </controller>
    <controller type="pci" index="15" model="pci-bridge">
      <model name="pci-bridge"/>
      <target chassisNr="15"/>
      <address type="pci" domain="0x0000" bus="0x0d" slot="0x02" function="0x0"/>
    </controller>
    <controller type="pci" index="16" model="pci-bridge">
      <model name="pci-bridge"/>
      <target chassisNr="16"/>
      <address type="pci" domain="0x0000" bus="0x0d" slot="0x03" function="0x0"/>
    </controller>
    <controller type="pci" index="17" model="pci-bridge">
      <model name="pci-bridge"/>
      <target chassisNr="17"/>
      <address type="pci" domain="0x0000" bus="0x0d" slot="0x04" function="0x0"/>
    </controller>
    <controller type="pci" index="18" model="pci-bridge">
      <model name="pci-bridge"/>
      <target chassisNr="18"/>
      <address type="pci" domain="0x0000" bus="0x0d" slot="0x05" function="0x0"/>
    </controller>
    <controller type="scsi" index="0" model="virtio-scsi">
      <driver queues="36" ioeventfd="on" ats="on" packed="on"/>
      <address type="pci" domain="0x0000" bus="0x07" slot="0x00" function="0x0"/>
    </controller>
    <controller type="usb" index="0" model="none"/>
    <controller type="virtio-serial" index="0">
      <address type="pci" domain="0x0000" bus="0x05" slot="0x00" function="0x0"/>
    </controller>
    <interface type="network">
      <mac address="{redacted}"/>
      <source network="guest-to-host"/>
      <model type="virtio-non-transitional"/>
      <driver name="vhost" ioeventfd="on" queues="36" ats="on" packed="on"/>
      <address type="pci" domain="0x0000" bus="0x02" slot="0x00" function="0x0"/>
    </interface>
    <interface type="network">
      <mac address="{redacted}"/>
      <source network="enp67s0f1-sriov"/>
      <address type="pci" domain="0x0000" bus="0x03" slot="0x00" function="0x0"/>
    </interface>
    <input type="mouse" bus="ps2"/>
    <input type="keyboard" bus="ps2"/>
    <tpm model="tpm-crb">
      <backend type="emulator" version="2.0" persistent_state="yes">
        <encryption secret="see https://www.libvirt.org/formatsecret.html"/>
      </backend>
    </tpm>
    <audio id="1" type="none"/>
    <hostdev mode="subsystem" type="pci" managed="yes">
      <source>
        <address domain="0x0000" bus="0x03" slot="0x00" function="0x0"/>
      </source>
      <address type="pci" domain="0x0000" bus="0x06" slot="0x00" function="0x0"/>
    </hostdev>
    <hostdev mode="subsystem" type="pci" managed="yes">
      <source>
        <address domain="0x0000" bus="0x03" slot="0x00" function="0x1"/>
      </source>
      <address type="pci" domain="0x0000" bus="0x09" slot="0x00" function="0x0"/>
    </hostdev>
    <memballoon model="none"/>
    <panic model="hyperv"/>
  </devices>
  <qemu:commandline>
    <qemu:arg value="-set"/>
    <qemu:arg value="device.scsi0-0-0-0.product=Sabrent Rocket 4 Plus 1TB"/>
  </qemu:commandline>
</domain>