It happened because three things we done at the same time:
1) affected agents were logged in
2) time zone was changed
3) failover took place
Because of this, some logout records were missing in the table. Report uses those events to calculate logon time, so the result was incorrect.