Set MTTF only if it is meaningful (i.e., not for models containing PAND gates)

[laena]

If a model contains a PAND gate some simulation rounds are bound to never fail, which leads to "infinity" as failure time in some cases, and the mean is only well-defined over numbers not containing "infinity".

The MTTF should be something like NaN if a PAND gate is present.