Query-free Black-box Adversarial Attacks on Graphs