Hi Chin-Leong Lim ( the first time that i got right)
?
Besides the TinySA, whose own IP3 is 17 dBm at best (thats your absolute limitation), the Signal generators Output Stages and even the Splitter with its Ferrite nonlinearity are also a source of Intermodulation which limit your measurement dynamics. Again, IP measurement of high IPs is demanding, dont't fall in your own traps.
?
regards, Fred