Checking Roundoff Errors using Counterexample-Guided Narrowing