Java - What are the additional 8 bytes of output generated by AES/CCM/NoPadding?
The additional 8 bytes are the Message authentication code (MAC), which is called the Message integrity check (MIC) in Bluetooth terminology. 

For more info, see here.