This exact PAE-then-EFER.LME-then-CR0.PG sequence is what Linux's arch/x86/boot/compressed/head_64.S and every 64-bit hobby OS on the OSDev wiki perform to escape 32-bit protected mode, and forgetting that long mode only activates once BOTH EFER.LME and CR0.PG are set (not either alone) is a classic bug that leaves the CPU stuck in compatibility mode. Every x86-64 machine on the planet boots through this identical multi-step dance.