The solution is: There is no solution!
==> You can't use USB0 for empty, factory default chips.
You need to set a flag first, and therefore need another ISP-serial-port (USB1 with crystal, UART, SPI, I2C, ...)
In my opinion, the UM11126-chapter6.3 is wrong:
"One of the serial interfaces (UART0, I2C1, SPI3, HS_SPI, USB0, USB1) is used to
download image from host into internal flash. The first valid probe message on USART,
I2C, SPI or USB locks in that interface."
It does not work for USB0 with default factory settings chip.