Spot the Bug: the cliff that never held

A vesting contract computes vested as (block.timestamp - start) * total / duration and returns it. The math is correct. What is still wrong?