If you halt the core in the HardFault_Handler(), find the SP value in the core registers.
Then, open the memory view at this SP address and read the stacked context.
You should find the PC address of the fault instruction there
It is explained in the documents I linked.
Regards,
Daniel