Minimum Topology Attacks for Graph Neural Networks