Revisiting Adversarial Attacks on Graph Neural Networks for Graph Classification