--- /dev/null
+Index: linux-2.6.23.16/drivers/net/b44.c
+===================================================================
+--- linux-2.6.23.16.orig/drivers/net/b44.c 2008-03-22 19:52:40.000000000 -0700
++++ linux-2.6.23.16/drivers/net/b44.c 2008-03-22 19:52:41.000000000 -0700
+@@ -2273,6 +2273,10 @@
+ bp->phy_addr = sdev->bus->sprom.et1phyaddr;
+ break;
+ }
++ /* Some ROMs have buggy PHY addresses with the high
++ * bits set (sign extension?). Truncate them to a
++ * valid PHY address. */
++ bp->phy_addr &= 0x1F;
+
+ memcpy(bp->dev->dev_addr, addr, 6);
+