Index: linux-2.6.23.16/drivers/net/b44.c
===================================================================
--- linux-2.6.23.16.orig/drivers/net/b44.c	2008-03-22 19:52:40.000000000 -0700
+++ linux-2.6.23.16/drivers/net/b44.c	2008-03-22 19:52:41.000000000 -0700
@@ -2273,6 +2273,10 @@
 	       bp->phy_addr = sdev->bus->sprom.et1phyaddr;
 	       break;
 	}
+	/* Some ROMs have buggy PHY addresses with the high
+	 * bits set (sign extension?). Truncate them to a
+	 * valid PHY address. */
+	bp->phy_addr &= 0x1F;
 
 	memcpy(bp->dev->dev_addr, addr, 6);