I found the reason of panic after adding boot argument of "rootless=0". It was caused by two kexts files in the SLE folder, CodecCommander.kext andAppleIntelCPUPowerManagementInfo.kext, [FONT=tahoma, Hiragino Sans GB, Wenquanyi Micro Hei, 微软雅黑, Arial, Verdana, sans-serif]respectively.
I deleted these two kext files and the hack booted into desktop successfully with boot flag of rootless=0.
I wonder, is there any way to put these two kext files back into the SLE folder?[/FONT]