If anyone else hits this, just shutting the SVIs isn't enough. I had to actually remove them from the config of the WLC and then mobility anchoring worked.

Option 43/DNS is only a valid choice for this if you're crazy enough to run without having primary/secondary/tertiarry WLCs configured on your APs. This functionality is there in Prime Infrastructure but PI sure does have a lot of bad days so I need ...