Proof for mult_comm