CatchBackdoor: Backdoor Testing by Critical Trojan Neural Path Identification via Differential Fuzzing