Nested serializers by default don't support create and update. To support this without duplicating DRF create/update logic, it is important to remove the nested data from validated_data before delegating to super:
# an ordinary serializer
class UserProfileSerializer(serializers.ModelSerializer):
...