From the CGI Docs:

the upload() function (new in version 2.47). When called with the name of an upload field, upload() returns a filehandle, or undef if the parameter is not a valid filehandle.(My Emphasis)

So, what you need to do to get the file HANDLE is: (Untested)

my $fh       = $q->upload( "file" );
[download]