I don't know about this specific MCU but in general, any illegal address (i.e., an address where code cannot possibly reside) is good enough. So, if not sure, or your address map seems to be fully used, maybe JMP-ing to a port (e.g., PORTA) would trigger this.