Proof of linearizability