8 chars, including numeric, uppercase and lowercase...
With sufficient GPU resources (being in possession of a working rig, cloud-based or standalone and air-gapped, all powered-up and running operable software) and talent (experience, and familiarity with an existing framework and an established code base), I'm thinking one person could brute force that, in the privacy of their own home, in a trivial amount of time.
Wow, this VR simulation looks and feels EXACTLY like I'm sitting still in a chair, in an air conditioned room, with two pounds of earmuffs and safety goggles strapped onto my face!
Wait, what's that smell? It smells like stale coffee that someone brewed only just a few hours ago...