Do SSDs use CTR mode? How does one perform a padding oracle against an SSD? I feel like we're pretty far away from the relevant context, which is users corrupting data on an SSD.

XTS mode for block storage. Can't be CBC or CTR, where would you Store the IV or counter/nonce?

You could store it in the block metadata, which SSD flash translation layers already use for wear-leveling purposes.

This sounds more like random speculation than informed commentary.

Does the SSD let you read the raw ciphertext to perform that attack? Or does it only expose the decrypted data?

There is no documented way to read cyphertext. I am SURE some manufacturer specific commands exist. But they will likely be undocumented, model-specific, and may be locked away behind a manufacturer key