Huh. addgroup is only expected to fail in a couple of ways, none of which we should be able to hit with that line.
About the only documented way I could see that happening is if you've already got a non-system group called ‘scanner’. Does that describe your system? Can you remove the --quiet switch from that command and see what gets printed out? Thanks.
signature.asc
Description: This is a digitally signed message part