It seems that ARM CMSIS uses this equation:

y[n] = b0*x[n] + b1*x[n-1] + b2*x[n-2] - a1*y[n-1] - a2*y[n-2]

So it expects the a coefficients already negated. Without this, you get massive positive feedback, hence the error.