Causal Fuzzing for Verifying Machine Unlearning