Prompt Stealing Attacks Against Large Language Models