I would also try single quotes in the file name, you never know you'll find a SQL injection if the filename is inserted into a DB without sufficient sanitization.
Notes from MDN:
The string following filename should always be put into quotes; but,
for compatibility reasons, many browsers try to parse unquoted names
that contain spaces.
You might also try to spoof the MIME type (Content-Type) in case the underlying application is relying on it rather than check the file extension (although this is unlikely).
Perhaps try a very large file name, like 255+ characters and see what happens.
PS: In this example
name should be the HTML form field name, I doubt it would be called hello.pdf.