I am having trouble replicating your error. Often times, a “400 Bad Request” error means something is wrong with the JSON request body. Could there be a hidden character somewhere?
I believe it would be a different error, but can you verify that Content-Type set to “application/json-patch+json” in the request headers?