Weird SPI read behaviour

A pullup will not help. I tried that back in this post: viewtopic.php?p=223968#p223968. My test showed that the IOM is clearly driving MOSI during an SPI read transfer and not letting it float.