QAVA: Query-Agnostic Visual Attack to Large Vision-Language Models