Analysis of the sending-side system instability caused by multiple HVDC commutation failure