Police say suicide bombers attacked three churches across Indonesia's second-largest city Surabaya, killing at least eight people and injuring at least 40 others.