Watermarking Graph Neural Networks based on Backdoor Attacks