If you're in the kernel you at least have raw access to the USB controller and input events, thus can try pick out real mouses from fake ones.
The most the kernel can try to tell you is what's plugged in, but the cheater can easily make the fake HID interposed between the real keyboard and USB.