Did you follow this guide to hide them from dom0 by adding rd.qubes.hide_pci option to GRUB?
rd.qubes.hide_pci