fist of all the MME should not send a PAP protocol id in the Attach Accept, it's only supposed to be sent by the UE and no authenticate-ack is required in LTE as far as I know
if I read RFC 1334 correctly, the authenticate_ack should have a msg-length field but it is not present, thus the malformed error