diff --git a/tests/test_sync.py b/tests/test_sync.py
index 2e5c300..f4b1d98 100644
--- a/tests/test_sync.py
+++ b/tests/test_sync.py
@@ -415,6 +415,10 @@ def test_unicode_hrefs():
     sync(a, b, status)
 
 
+class ActionIntentionallyFailed(Exception):
+    pass
+
+
 class SyncMachine(RuleBasedStateMachine):
     Status = Bundle('status')
     Storage = Bundle('storage')
@@ -446,6 +450,16 @@ class SyncMachine(RuleBasedStateMachine):
 
         return s
 
+    @rule(target=Storage, s=Storage)
+    def actions_fail(self, s):
+        def blowup(*a, **kw):
+            raise ActionIntentionallyFailed()
+
+        s.upload = blowup
+        s.update = blowup
+        s.delete = blowup
+        return s
+
     @rule(target=Status)
     def newstatus(self):
         return {}
@@ -482,6 +496,7 @@ class SyncMachine(RuleBasedStateMachine):
         assume(a is not b)
         old_items_a = self._get_items(a)
         old_items_b = self._get_items(b)
+        old_status = deepcopy(status)
 
         try:
             # If one storage is read-only, double-sync because changes don't
@@ -490,6 +505,8 @@ class SyncMachine(RuleBasedStateMachine):
                 sync(a, b, status,
                      force_delete=force_delete,
                      conflict_resolution=conflict_resolution)
+        except ActionIntentionallyFailed:
+            assert status == old_status
         except BothReadOnly:
             assert a.read_only and b.read_only
             assume(False)