the log looks strange except 1st line. or any typo?
according the 408 error_log entry, check corresponding access_log entries for same IP around the time stamp, may find something unusual. for example, if above error log not typo, it looks in the client's http request, User-Agent is too long...