Correct documentation of SPI, you MUST NOT pass the same buffer to tx/rx.