This is a compilation from the comments (some of them deleted by now) showing the thought process in finding the reaction product and eliminating some of the steps that might seem plausible. None of the insight is mine.
Formation of a cation
I think the H+ will first attack the oxygen of the epoxide
Yes, that is the first step.

No attack by a nucleophilic oxygen at this point
[...] and another OH− will be added to the most substituted carbocation, which is the secondary carbon of the epoxide. This will form a glycol,but don't know where to go from there.
This does not happen.
H3O+ means H+ in water so OH- is available.
The solution is acidic, so there is very little hydroxide available.
H20 will act as a nucleophile and attack the carbocation, this will result in a H+ being released from +(H2O)
This does not happen.
Why is the H2O not attacking before the formation of 5 member ring?
Compared to hydroxide, water is not a strong nucleophile. ANBENZENE comments: "[...] the molecule will always try to generate a stable carbocation [...]".
Rearrangement to make a more stable carbocation
As Waylander states in a comment: "Have the double bond electrons attack the protonated epoxide to give the most stable cation. Remember, forming [5] rings is favorable".
This is an intramolecular reaction, going from a carbocation on a secondary carbon to one on a tertiary carbon. Also, a five-membered ring is formed and a three-membered ring was opened.

Final step: water reacts with the carbocation
Finally, the oxygen on water does attack a carbocation, resulting in the second hydroxyl group found in the product.