The CAN node which initiates the BUS OFF error condition state is essential isolated from the CAN bus, the remaining CAN nodes operate independently, remaining active, unless of course they too initiate a BUS OFF error condition state.
Although the actual recovery measures taken following a BUS OFF error condition state may largely depend on the specifics of the node's CAN controller, typically an interrupt is triggered and a process of recovery/reinitialization begins.
Often after waiting for the mandatory time period, 128 x 11 bits, an attempt at reinitialization begins.
BigDog