Tom,
This is a very clear failure of the 4dB step of the built in attenuator. Agree you should ask for an exchange. Refer to this measurement as evidence
--
------------------------------------------
For more info on the tinySA go to https://tinysa.org/wiki/