Please ensure all devices within the iommu_group are bound to their vfio bus driver.
You have to pass every device in the group through at once, which isn't going to work for you. The only way to avoid that is to enable the ACS Override kernel patch to split up the group (by pretending the devices can be safely isolated from each other, even though they can't be)