safe: add Reader
fs/testing: use safe reader to avoid data races