Jointly Attacking Graph Neural Network and its Explanations