I've run traces under the crystal, but only lines that don't change much, like Reset, or some signal that I have a plan for.
Try high speed serial transfers, like 115200, 230400, see if anything pops up.
Do you see the frequency change if let the board stabilize temperature wise?