If the public or private key has has points that are not on the curve, ECDHKeyAgreement.generateSecret() will throw a ProviderException.
It should be a InvalidKeyException, which is a subclass of the GeneralSecurityException.

The KeyAgreement.generateSecret() spec says IllegalStateException are to be thrown. The EC method does not wrap previous exception.