A Russian attack on a civilian bus in Ukraine's northeast Sumy region has killed nine people and injured four others, the Ukrainian military has said.