Group Property Inference Attacks Against Graph Neural Networks