Poisoning GNN-based recommender systems with generative surrogate-based attacks