Similar to T8514, bug in reduction causes poly1305-p10 calculate wrong tag with some inputs. Noticed with T8514's test-vectors.
Fix: