Running into issues with max mask length

[royce]

I honestly haven't tried this before, but instead of trying to load it all into a mask, you might also be able to just do a hybrid attack (mask + wordlist), where the wordlist is just one line with your remaining salt+padding in it (using --hex-wordlist). You'd have to do a separate attack for each byte length.