<qemu:commandline>
    <qemu:arg value='-drive'/>
    <qemu:arg value='file=/var/lib/libvirt/images/test.qcow2,format=qcow2,if=none,id=NVME1'/>
    <qemu:arg value='-device'/>
    <qemu:arg value='nvme,drive=NVME1,serial=nvme-1'/>
  </qemu:commandline>
</domain>

# cat /etc/apparmor.d/abstractions/libvirt-qemu
/var/lib/libvirt/images/test.qcow2 rwk,

systemctl restart apparmor.service

chmod 777 /var/lib/libvirt/images/test.qcow2