The different IOMMU groups have different controller with the same ID.
It should be possible to pass the USB from the CPU SoC, as it is working for TR 1920X. Just check which controller is for which USB ports. According to board manual, 2 of the 1022:145f USB controllers are responsible for 4 blue ports each. Those are the 8 blue ports on the backpanel. The red one, type C and internal headers are from the chipset.
You dont need to bind 1022:145a even if it is in the same group.
And your problem could be related to binding all of the 1022:1456 Encryption controllers.
Try to boot with only vfio-pci.ids=1022:145f to see if you still have the problem.
Updating BIOS could help splitting the USB controller to its own group. IIRC agesa 1.1.0.2 did that for me on 1920X and Asrock x399 taichi.
Check VFIO in 2019 -- Pop!_OS How-To (General Guide though) [DRAFT] as that has a initramfs script for binding based on PCI address. Cant help you with unRAID implementation if the guide is not working.