宿州市
In winter 868, Kang arrived at Xinxing (新興, in modern Bozhou, Anhui), but at that time, he had only a little more than 10,000 men, and when Pang's follower Yao Zhou (), who was then at nearby Liuzi (柳子, in modern Suzhou, Anhui), challenged him, he did not dare to engage Yao and withdrew to Song Prefecture (宋州, in modern Shangqiu, Henan). Meanwhile, the rebels continued to expand their territory, largely unchecked. By spring 869, however, Kang had gathered over 70,000 soldiers and stationed his army just west of Liuzi, and only then did the rebels begin to become fearful. When one rebel commander who did not fear him, Wang Hongli (), attacked him, he, together with Zhuye, defeated Wang, and it was said that starting from that point on, those in the rebel army who did not wholeheartedly support the rebel effort would surrender immediately upon engaging the imperial army. Kang then attacked and captured Liuzi, causing Yao to flee, and Yao was subsequently killed by the fellow rebel commander Liang Pi ().