LLM-Powered Text Simulation Attack Against ID-Free Recommender Systems