My apologies to WIZnet, it seems my SPI is buggy and is right-shifting reads by 1 bit. 0x11<<1 is indeed the valid SOCKMODE_UDP.