LR (R14) will (normally?) point 8 bytes (2 ARM instructions) after the instruction that caused the exception. If you wish to debug the cause, you'll need to examine LR - 8, not move it to PC using SUBS.