MTBF Model for AVs -- From Perception Errors to Vehicle-Level Failures