The block appears to be trying to display the form even if it hasn't been generated (i.e. if the user doesn't have permission to use it). $form $anchor and $list either need to be initialised or not used unless they've been set.