Report: http://seclists.org/nmap-dev/2015/q2/301

I confirmed this is still present in current development trunk. Solaris manpage for bind suggests EINVAL can be caused by incorrect sa_len or a socket already bound to an address.