I’ve seen this after inviting someone whom also received a pop for copilot and they probably clicked it not intending to send of a request. Just seems like traditional bad Microsoft design.