After converting to VSS, we still have a portchannel on switch 1 of the VSS cluster that has mls qos trust dscp config on te1/5/5 and te1/6/5 that are memeber of portchannel 1. This configuration was already on the ports before the switch to VSS mode...