Combining AEAD with RSA
The main pitfall is possibly thinking that it provides authentication.

The result is still a public key scheme.

It won't help to include the IV in the associated data, since

that is already covered by the authenticated part of AEAD.

Including the RSA-encrypted symmetric key in the associated data would help by making the

resulting hybrid encryption CCA2 secure even if the core public key scheme is only RCCA secure.

RCCA: Relaxing Chosen-Ciphertext Security