Your global objects execute their constructors before setup. One of them likely touched the SPI pins too.